Re: [openssl-users] OpenSSL Release Strategy and Blog

2014-12-28 Thread Kurt Roeckx
On Sun, Dec 28, 2014 at 01:31:38AM +0100, Jakob Bohm wrote: 3. The 1.0.x binary compatibility promise seems to not have been completely kept. As recently as just this December, As a practical example: I had an OS upgrade partially fail due to the presence of a self-compiled up to date

[openssl-users] Problems verifying OCSP signatures

2014-12-28 Thread Richard Moore
Hi All, I'm trying to get some code to verify the signature of an OCSP response to work properly and I'm hitting quite a few road blocks. I've also been talking to the curl developers who are having the same problems and I wondered if anyone can help us. I've tried 3 different ways of handling

Re: [openssl-users] OpenSSL Release Strategy and Blog

2014-12-28 Thread Matt Caswell
On 28/12/14 00:31, Jakob Bohm wrote: On 24-12-2014 00:49, Matt Caswell wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 You will have noticed that the OpenSSL 1.0.0 End Of Life Announcement contained a link to the recently published OpenSSL Release Strategy that is available here:

Re: [openssl-users] OpenSSL Release Strategy and Blog

2014-12-28 Thread Salz, Rich
For comparison, Microsoft I'm not quite sure how we should respond to any paragraph that begins with those words. :) I respectfully disagree. We, the OpenSSL dev team, all do. The release strategy document is the strong consensus of the entire team. -- Principal Security Engineer,