https://bz.apache.org/bugzilla/show_bug.cgi?id=67683
Bug ID: 67683 Summary: C source code is compatible with OpenSSL 1.0.2 Product: Tomcat Native Version: 1.2.39 Hardware: All OS: All Status: NEW Severity: normal Priority: P2 Component: Library Assignee: dev@tomcat.apache.org Reporter: micha...@apache.org Target Milestone: --- Important: I do not expect anything to make this code run with OpenSSL 1.0.2, I just want to outline the following incompat from an example: Here [1] we say that our code run with 1.0.2 or newer. Let's consider we'd try, then let's have a look at 2c22764c49c06c4a6ccbbcc08021be43de7eba49 SSL#version() and SSL#versionString() use functions in C which aren't listed here [2], so I need to assume that the code isn't compatible anymore. If my understanding is correct, we should abandon 1.2.x soon and start with 1.3.x, raise to 1.1.1 minimum and remove old pre-1.1.1 checks. Again: I don't expect or want someone to use it with 1.0.2, but pointing out that our setup is incorrect. [1] https://github.com/apache/tomcat-native/blob/a2aa5aff32ab1fee2bcdd2fce1446786633eb0ee/native/build/tcnative.m4#L247-L254 [2] https://www.openssl.org/docs/man1.0.2/man3/ -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org