On Fri, 10 Jan 2020, Andreas Wacknitz wrote:

According to https://www.openssl.org/policies/releasestrat.html LTS for
OpenSSL 1.0.2 ended 31/12/2019.
Do we need work on Version 1.1.1? It will be supported until 2023-09-11
(LTS).

Updating should be done, but expect that it will be rather painful. The updated version has deprecated and removed interfaces which were often used before. For example, previously code would instantiate a structure (e.g. on the stack, or using malloc()), initialize it, and use it directly, but now the interface structure definitions are opaque (only forward declared) and one must use constructor/destructor functions provided by OpenSSL. Luckily, other interfaces appear to be mostly unchanged.

Updating OpenSSL will likely require updating dependent applications to versions which are new enough to already be ported to 1.1.1. The alternative is to port older applications to work with 1.1.1. Porting applications is not hard, but it is tedious.

Bob
--
Bob Friesenhahn
bfrie...@simple.dallas.tx.us, http://www.simplesystems.org/users/bfriesen/
GraphicsMagick Maintainer,    http://www.GraphicsMagick.org/
Public Key,     http://www.simplesystems.org/users/bfriesen/public-key.txt

_______________________________________________
oi-dev mailing list
oi-dev@openindiana.org
https://openindiana.org/mailman/listinfo/oi-dev

Reply via email to