Public bug reported:

* TLS 1.3 is now a proposed standard

https://www.ietf.org/mail-archive/web/ietf-
announce/current/msg17592.html

* OpenSSL upstream is planning OpenSSL 1.1.1 release with the following
tentative timeline:

- 20th March 2018, beta release 1 (pre3) (released)
  + OpenSSL_1_1_1-stable created (feature freeze)
  + master becomes basis for 1.1.2 or 1.2.0 (TBD)
- 3rd April 2018, beta release 2 (pre4)
- 17th April 2018, beta release 3 (pre5)
- 1st May 2018, beta release 4 (pre6)
- 8th May 2018, release readiness check
  (new release cycles added if required,
   first possible final release date: 15th May 2018)

* OpenSSL 1.1.0 will then go end of life - 
  "Version 1.1.0 will be supported until one year after the release of 1.1.1"

* Proposal to ship OpenSSL 1.1.1 in Bionic by

- landing 1.1.1 pre3 asap
- follow up landing pre-releases as they become available
- continue to land pre-releases as SRUs as they become available
- until 1.1.1 final is shipped in bionic-updates & bionic-security

* Contingency plan:

- If packages FTBFS, attempt to fix them before 18.04.0
- If packages fail autopkgtests, attempt to fix them before 18.04.0
- If TLS1.3 causes connectivity issues, consider shipping with TLS1.3 not 
enabled by default
- If all of above fails, consider reverting to 1.1.0

* Testing silo to be provided shortly

** Affects: openssl (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1759059

Title:
  [FFe] OpenSSL 1.1.1 series with TLS 1.3 support and longer upstream
  support

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1759059/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to