RE: Basic question on version number..

2008-08-24 Thread Kenneth Goldman
 The decision in the case of OpenSSL was that 1.x would have a stable API,
 permitting shared libraries to be used interchangeably. OpenSSL does not
 have a stable API yet, officially.

If that's the rationale, I eagerly await 1.0.  The lack of a stable
API has hurt me far too many times.  I encourage the developers
to freeze the existing API.

 Shared library is currently an experimental feature.  The only reason to
  have them would be to conserve memory on systems where several program
  are using OpenSSL.  Binary backward compatibility can't be guaranteed
  before OpenSSL version 1.0.

I think this was the original idea.  For me, the more important reason
to use a shared library is the ability to upgrade the library when I
don't have access to the source/object code that uses the library.

Re: Basic question on version number..

2008-08-24 Thread Goetz Babin-Ebell

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Kenneth Goldman wrote:
|   The decision in the case of OpenSSL was that 1.x would have a
stable API,
|   permitting shared libraries to be used interchangeably. OpenSSL
does not
|   have a stable API yet, officially.
|
| If that's the rationale, I eagerly await 1.0.

Be prepared to wait a long time...
I don't think we see a OpenSSL 1.0 anytime soon.

If you think that a 0.9.9 indicates a pending 1.0, you are wrong.
The OpenSSL version numbering allows something like a version
0.255.255 ...
So I expect that the release after 0.9.9 will be a 0.9.10...


Goetz

- --
DMCA: The greed of the few outweighs the freedom of the many
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.4-svn0 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIsYd92iGqZUF3qPYRAmFNAJ0d5F8fOB1ihoRg37VDc7uNIhSC3wCfe/Z8
qFcrCJO2nkk8NCl2Z1osryk=
=FoPM
-END PGP SIGNATURE-
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]


Re: Basic question on version number..

2008-08-22 Thread A . L . M . Buxey
Hi,

 Why the latest version is still 0.9.x, why it hasn't bumped up to 1.x in
 last 8 years. Generally 1.x defines a stable version.

hmm, I personally would not get hung up on '1.x is stable' - 
having used dozens of platforms and software versions
to run network delivery solutions I can tell you that NOTHING
means that stuff is 'stable' - certainly there are more
BETA releases with  1.x numbers than there are sub
1.x releases  :-)

anyhow, the reasoning for the OpenSSL never going above 1.0
right now has been given in another post - but rest assured,
they'll have a dilemna with defining what is 2.0 once
they have finally breached the 'over 1.x the libraries
are more flexible' mantra

alan
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]


Re: Basic question on version number..

2008-08-22 Thread Joe Flowers
   We're thinking of using openssl in our company but wondering about the
version number.

Rach,

OpenSSL is a great product. It is very widely used and adopted throughout
the world. If you ripped it off the face of the planet right now, it would
be catastrophic because so many people and systems and programs and etc.
depend on it. Care none what version numbering scheme they use.

Joe
--


RE: Basic question on version number..

2008-08-21 Thread David Schwartz

 Hi,
  We're thinking of using openssl in our company but wondering
 about the version number.
 Why the latest version is still 0.9.x, why it hasn't bumped up
 to 1.x in last 8 years. Generally 1.x defines a stable version.

 Any insight would be helpful in making a decision.

 Thanks,
 Rach

http://thedailywtf.com/Articles/One_Version_to_Rule_Them_All.aspx

The decision in the case of OpenSSL was that 1.x would have a stable API,
permitting shared libraries to be used interchangeably. OpenSSL does not
have a stable API yet, officially.

Shared library is currently an experimental feature.  The only reason to
 have them would be to conserve memory on systems where several program
 are using OpenSSL.  Binary backward compatibility can't be guaranteed
 before OpenSSL version 1.0.

OpenSSL, however, is very solid and probably the best-tested SSL
implementation in existence. I, personally, would be much more concerned
about the risk of *security* problems. OpenSSL's software is openly
available and has stood the test of time.

DS


__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]