Hey Simon,

On Thu, Aug 17, 2023 at 4:42 AM Simon Chopin <simon.cho...@canonical.com> wrote:
>
> Hi,
>
> Quoting Mauricio Faria de Oliveira (2023-08-15 15:20:50)
> > Hey,
> >
> > I'd like to request input (initially thinking of involved teams: SRU,
> > Foundations)
> > on backports of some performance improvement patches to OpenSSL in Jammy.
> > (Please feel free to comment and include others as appropriate.)
>
> FYI, Adrien is currently offline, he should be back in a couple of
> weeks. Meanwhile you can get my 2¢ as his backup on openssl-related
> matters :)
>
> > SEG has a customer support ticket about it, which allows us to put in the 
> > work,
> > but of course, it is OpenSSL, an SRU, thus agreement beforehand is needed.
> >
> > ...
> >
> > The context is OpenSSL 3.0 has known, significant performance regressions 
> > [0]
> > from OpenSSL 1.1.1, which has been addressed / still in-progress upstream:
> > 1) some patches in the 3.0 stable branch
> > 2) some patches in the master branch (ie, not backported to 3.0)
> > 3) some issues still open
> >
> > To offset regression risk, there are benefits; e.g., 1) Performance:
> > some improvement 2) Security: smaller delta to 3.0 branch (may help
> > with CVE fix backports) 3) Community: possibly help with mentions of
> > Ubuntu 22.04 in regressions
> >
> > IMHO, backports should be restricted to the 3.0 branch (so not to
> > defeat 2).
>
> Not Security, but I'm OK with backporting patches from the master branch
> as well, but only if we can get them in Mantic first, and wait for its
> GA. That would give exposure to a wider range of hardware, shaking off
> some regressions.

Understood. We'll consider that option, for patches from the master branch.

Hopefully, most patches may be in 3.0 stable (to land before October),
but nonetheless, it's reassuring to know there's a way forward for
other patches.

Thanks!

-- 
Mauricio Faria de Oliveira

-- 
Ubuntu-release mailing list
Ubuntu-release@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-release

Reply via email to