On 06-03-18 23:16, Jonathan K. Bullard wrote:
> Can someone clarify which versions of OpenSSL OpenVPN supports (that
> is, "works with when linked statically")?
> From what I gather:
>  * OpenVPN 2.3.18 supports OpenSSL 1.0.2n
>  * OpenVPN 2.4.5 supports OpenSSL 1.0.2n and 1.1.0g
>  * OpenVPN 2.5 will support OpenSSL 1.0.2n and 1.1.0g
> Is that correct? (I assume OpenVPN 2.5 won't remove support for
> OpenSSL 1.0.2, which ends "Long Term Support" on 2019-12-31.)

Our configure.ac is "the truth" here.  It says:

OpenVPN 2.3 should work with OpenSSL 0.9.6+  (But, < 1.1)
OpenVPN 2.4 should work with OpenSSL 0.9.8+
OpenVPN master should work with OpenSSL 1.0.1+

Where master is of course still in flux, so we might increase the
minimum version at some point before the 2.5 release.

We still want to be compatible with those older openssl versions,
because distros with LTS such as RHEL and SLES do keep those older
versions up-to-date wrt security, and we'd like to build out-of-the-box
on those platform.


Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
Openvpn-devel mailing list

Reply via email to