[Touch-packages] [Bug 1596693] Re: OpenSSL 1.0.2 for trusty

2017-03-10 Thread Eduard Bloch
But you do realize that all versions prior to 1.0.2 are PITA to code
developers?

I.e. the hostname validation, the very basic feature, needs to be
implemented with creepy hacks for OpenSSL before 1.0.2.

https://wiki.openssl.org/index.php/Hostname_validation

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/1596693

Title:
  OpenSSL 1.0.2 for trusty

Status in openssl package in Ubuntu:
  Won't Fix

Bug description:
  ALPN support was introduced in OpenSSL 1.0.2 which myself, and I'm
  guessing a lot of other people, are going to need, is there any chance
  OpenSSL 1.0.2 will come to trusty, or can be backported?

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1596693/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1596693] Re: OpenSSL 1.0.2 for trusty

2016-06-28 Thread Marc Deslauriers
Ubuntu doesn't typically update to newer software versions. Like most
other Linux distros, we backport security patches to the versions of
software we ship, whether or not there is still upstream support for it.

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/1596693

Title:
  OpenSSL 1.0.2 for trusty

Status in openssl package in Ubuntu:
  Won't Fix

Bug description:
  ALPN support was introduced in OpenSSL 1.0.2 which myself, and I'm
  guessing a lot of other people, are going to need, is there any chance
  OpenSSL 1.0.2 will come to trusty, or can be backported?

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1596693/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1596693] Re: OpenSSL 1.0.2 for trusty

2016-06-28 Thread Manfred Hampl
>From https://www.openssl.org/policies/releasestrat.html

Support for version 1.0.1 will cease on 2016-12-31. No further releases
of 1.0.1 will be made after that date. Security fixes only will be
applied to 1.0.1 until then.

How is Ubuntu going to deal with that? Both Precise and Trusty currently
have 1.0.1 versions, and both Ubuntu releases have a target life time
beyond that date.

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/1596693

Title:
  OpenSSL 1.0.2 for trusty

Status in openssl package in Ubuntu:
  Won't Fix

Bug description:
  ALPN support was introduced in OpenSSL 1.0.2 which myself, and I'm
  guessing a lot of other people, are going to need, is there any chance
  OpenSSL 1.0.2 will come to trusty, or can be backported?

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1596693/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1596693] Re: OpenSSL 1.0.2 for trusty

2016-06-27 Thread Seth Arnold
I strongly doubt there will be an official effort to backport OpenSSL
1.0.2 for 14.04 LTS; it would not be feasible to replace the existing
1.0.1f-derived packages with 1.0.2-derived packages, and duplicating
packages would add to the maintenance burden.

16.04 LTS's openssl package is based on a 1.0.2g starting point. If
running 16.04 LTS is not an option then perhaps the backportpackage
command from the ubuntu-dev-tools package could help you.

Thanks

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/1596693

Title:
  OpenSSL 1.0.2 for trusty

Status in openssl package in Ubuntu:
  Won't Fix

Bug description:
  ALPN support was introduced in OpenSSL 1.0.2 which myself, and I'm
  guessing a lot of other people, are going to need, is there any chance
  OpenSSL 1.0.2 will come to trusty, or can be backported?

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1596693/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1596693] Re: OpenSSL 1.0.2 for trusty

2016-06-27 Thread Seth Arnold
** Changed in: openssl (Ubuntu)
   Status: New => Won't Fix

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/1596693

Title:
  OpenSSL 1.0.2 for trusty

Status in openssl package in Ubuntu:
  Won't Fix

Bug description:
  ALPN support was introduced in OpenSSL 1.0.2 which myself, and I'm
  guessing a lot of other people, are going to need, is there any chance
  OpenSSL 1.0.2 will come to trusty, or can be backported?

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1596693/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp