https://bz.apache.org/bugzilla/show_bug.cgi?id=63671
--- Comment #6 from Michael Osipov <micha...@apache.org> --- (In reply to Michael Osipov from comment #5) > (In reply to Mark Thomas from comment #2) > > I think INVALID would have been a better resolution here. OpenSSL 1.1.0 and > > earlier are no longer supported. > > > > There are probably still OpenSSL 1.1.0 and earlier specific workarounds in > > the Tomcat Native code base. We should be removing that cruft rather than > > continuing to fix build issues with unsupported OpenSSL versions. > > I concur because many OS vendors still bundle 1.0.2 and provide fixes to > those. Only upstream is not supported anymore. E.g., default OpenSSL on RHEL > 7 is still 1.0.2, as sad as it sounds. Here is the ref: https://access.redhat.com/discussions/4285911 I think that a potentional libtcnative 2.0 can drop pre-1.1.1 support. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org