[
https://issues.apache.org/jira/browse/HADOOP-16647?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17073226#comment-17073226
]
Wei-Chiu Chuang commented on HADOOP-16647:
------------------------------------------
I'm not sure I follow the conversation.
Building Hadoop on openssl 1.1.0 was possible (HADOOP-14597). So I would
suppose there are backward incompatible changes introduced in 1.1.1 not in
1.1.0? Or maybe Federa retained that symbol while the upstream openssl 1.1.0
removed that?
The other thing is that openssl 1.0.2 is shipped with RHEL 7.4 and above, and
Red Hat claims they are still supporting 1.0.2 till the end of support of RHEL
7. (RHEL 8 is on openssl 1.1.1 it looks like)
https://access.redhat.com/solutions/2728111
Rakesh, can you also check it can compile against openssl 1.0.2 as well as
1.1.0/1.1.1? Not sure if openssl 1.1.0 was adopted widely.
> Support OpenSSL 1.1.1 LTS
> -------------------------
>
> Key: HADOOP-16647
> URL: https://issues.apache.org/jira/browse/HADOOP-16647
> Project: Hadoop Common
> Issue Type: Task
> Components: security
> Reporter: Wei-Chiu Chuang
> Priority: Critical
> Attachments: HADOOP-16647-00.patch
>
>
> See Hadoop user mailing list
> http://mail-archives.apache.org/mod_mbox/hadoop-user/201910.mbox/%3CCADiq6%3DweDFxHTL_7eGwDNnxVCza39y2QYQTSggfLn7mXhMLOdg%40mail.gmail.com%3E
> Hadoop 2 supports OpenSSL 1.0.2.
> Hadoop 3 supports OpenSSL 1.1.0 (HADOOP-14597) and I believe 1.0.2 too.
> Per OpenSSL blog https://www.openssl.org/policies/releasestrat.html
> * 1.1.0 is EOL 2019/09/11
> * 1.0.2 EOL 2019/12/31
> * 1.1.1 is EOL 2023/09/11 (LTS)
> Many Hadoop installation relies on the OpenSSL package provided by Linux
> distros, but it's not clear to me if Linux distros are going support
> 1.1.0/1.0.2 beyond this date.
> We should make sure Hadoop works with OpenSSL 1.1.1, as well as document the
> openssl version supported. File this jira to test/document/fix bugs.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
