[RESOLVED] Re: Openssl 1.1.1 support ending in 2023-09-11

2022-09-11 Thread Julien 
 With 
https://cgit.freedesktop.org/libreoffice/core/commit/?id=a539db002bc9ee6692d14cde2aaa166bd213eb51,
 LO master sources use openssl 3.0.5
Thank you Caolán!

Re: Openssl 1.1.1 support ending in 2023-09-11

2022-09-08 Thread Caolán McNamara 
On Wed, 2022-09-07 at 21:54 +0200, Julien Nabet wrote:
> I suppose some LO code should be modified but there are also external
> libs/apps like Postgresql and Python to take into account and perhaps
> it could be the tricky part since we're autonomous here.

In Fedora we don't build LibreOffice with direct openssl use, but
checking here I don't see that any of the LibreOffice dependencies in
Fedora 36 pull in openssl < 3 so that suggests that it may be that all
of our dependencies are good with openssl3 and/or there are fixes
available so maybe it is plausible to move over now.

lets see how far we get with:
https://gerrit.libreoffice.org/c/core/+/139641

Openssl 1.1.1 support ending in 2023-09-11

2022-09-07 Thread Julien Nabet 

Hello,

Reading https://www.openssl.org/policies/releasestrat.html, I noticed:

"Version 1.1.1 will be supported until 2023-09-11 (LTS)."

There's OpenSsl 3.0.5 now, I don't know if it can be considered stable 
enough and perhaps it could be interesting to use V1.1.1 until the last 
moment to give maximum time OpenSsl guys hardening 3.0 branch.


However I leafed through this link 
https://www.openssl.org/docs/man3.0/man7/migration_guide.html and it 
seems there are some changes to do to prepare the migration.


I suppose some LO code should be modified but there are also external 
libs/apps like Postgresql and Python to take into account and perhaps it 
could be the tricky part since we're autonomous here.


I don't pretend having a solution, great ideas or working on it, my goal 
here is just to be sure that people know about the end of v1.1.1 support 
; 1 year before the end date may be not much considering what has to be 
done.


Now perhaps someone is already working on it, if it's the case, sorry 
for having missed the info.


Julien