Re: [squid-dev] OpenSSL 1.1 support

2017-12-19 Thread Amos Jeffries

On 19/12/17 22:04, Adam Majer wrote:

On 12/18/2017 06:17 PM, Amos Jeffries wrote:

On 19/12/17 04:48, Adam Majer wrote:

Hi,

Is there a plan of supporting OpenSSL 1.1 in squid 3.5.x branch?



Not currently. Some of the config changes the library imposes may be a
bit surprising for a stable release.


If you are self-building to get SSL-Bump support I recommend trying to
use Squid-4 anyway. It should be stable enough for most installations
and has better SSL-Bump and related behaviours.


Actually, the reason I'm asking is OpenSUSE Tumbleweed has migrated away
from OpenSSL 1.0 to 1.1. Is there a current timeline when 4.x branch
will become stable?


6-12 months ago was the plan. :-(




Is there a list of tasks that need to be fixed for 4.x branch to be
considered stable?




We are currently stuck at #3 in that process with a few major bugs 
preventing reaching #4.

()

Some of those already have workarounds in v4 and so are planned to 
ignore for purposes of declaring stability. But a full fix for any of 
them (and any other bug) is of course very welcome.


Next release on my calendar is ~6th January. So re-evaluation of all the 
pieces will be happening across the week prior.


Amos
___
squid-dev mailing list
squid-dev@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-dev


Re: [squid-dev] OpenSSL 1.1 support

2017-12-19 Thread Adam Majer
On 12/18/2017 06:17 PM, Amos Jeffries wrote:
> On 19/12/17 04:48, Adam Majer wrote:
>> Hi,
>>
>> Is there a plan of supporting OpenSSL 1.1 in squid 3.5.x branch?
>>
> 
> Not currently. Some of the config changes the library imposes may be a
> bit surprising for a stable release.
> 
> 
> If you are self-building to get SSL-Bump support I recommend trying to
> use Squid-4 anyway. It should be stable enough for most installations
> and has better SSL-Bump and related behaviours.

Actually, the reason I'm asking is OpenSUSE Tumbleweed has migrated away
from OpenSSL 1.0 to 1.1. Is there a current timeline when 4.x branch
will become stable?

Is there a list of tasks that need to be fixed for 4.x branch to be
considered stable?

- Adam
___
squid-dev mailing list
squid-dev@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-dev