> On Sep 11, 2018, at 10:17 AM, The Doctor <[email protected]> wrote:
>
> Yes. I would encourage *all* applications still on the 1.0.x API to move
> to 1.1.1 asap. By the end of next year there will be no supported
> OpenSSL version that has the old API.
All supported Postfix releases (3.0, 3.1, 3.2, 3.3 and the 3.4 snapshots)
work with OpenSSL 1.1.x at their most recent patch levels. This was done
some time back.
Some new features in OpenSSL 1.1.1 could use new controls on the
Postfix side (though this is not essential), I'll try to get those
added this year.
--
Viktor.