Hello, ProFTPD developers!  I'm contemplating the growing complexity of 
ProFTPD's TLS/crypto codebase, and how to reduce it.  Much of that complexity 
is related to OpenSSL, and its changing APIs over the years.

Thus I'd like to start phasing out support for older OpenSSL versions.  How 
old?  Well, I'm hoping you can help me decide that.

We can use the OPENSSL_API_COMPAT macro (at least since OpenSSL-1.1.0), like 
this PR:

  https://github.com/pyca/cryptography/pull/4313

I know that there are some platforms, like HP-UX or AIX, where bleeding-edge 
OpenSSL versions may not be used/available.  But support for OpenSSL before 
1.0.0 can be phased out, yes?

Part of this will be establishing criteria for this project, going forward, for 
knowing when/how to EOL support for older library versions (not just OpenSSL) 
-- and how to announce that, with enough advance notice for packagers/distros 
to be prepared.

I look forward to hearing your thoughts on this topic!

Cheers,
TJ


_______________________________________________
ProFTPD Developers List
<proftpd-de...@proftpd.org>
https://lists.sourceforge.net/lists/listinfo/proftp-devel

Reply via email to