LibreSSL languishes on Linux

Me too. Last I heard, maybe ten years ago? GnuTLS was ignoring specs where mildly inconvenient, e.g. IIRC failing to zero out the rest of a text field as required, relying on the terminating NUL from strcpy to get the rest of the field to be ignored. Did that ever get resolved?

Also curious about the condition of libnss.

And, what is this about openssl 2 and 3? All I have seen lately are 1.1.?.