OpenSSL 1.1 - don't upgrade (yet)
Erwin Hoffmann <[email protected]>
| Newsgroups | gmane.mail.qmail.general |
|---|---|
| Message-ID | <[email protected]> |
Hi together, OpenSSL version 1.1 is out since August 25th (https://www.openssl.org/source/). * Please do not upgrade yet! * OpenSSL 1.1 breaks many APIs used by ucspi-ssl and other SW based on previous versions. At least me, I need to cross-check compatibility with ucspi-0.97. Probably it is better to wait until TLS (1.3) will incorporate ed25519 (DJB's curve) for ECC ( https://tools.ietf.org/html/draft-ietf-tls-rfc4492bis-07) and a subsequent new OpenSSL release supports it. Best regards. --eh. PS. For German language enabled readers: http://blog.fefe.de/?ts=a93f56bb Dr. Erwin Hoffmann | FEHCom | http://www.fehcom.de | PGP Key-Id: EE00CF65
signature.asc
(application/pgp-signature, 842 B)
-----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJXwcYEAAoJEIP8+SDuAM9lLScP/iRDuCXUnv3B4c8Q+64vKeaJ prlsFthbaTyauDQFZCzqbNbduZoUaIpr94vFYIqrApqM6DK9i21tyMnj5GiuNUvt 8yJW2AT1Fy7RzzbqHEv+iPVSKwAUywhKP+aF9EUPfsfguSsGC7RpRa9Tkzp/GzU7 cvWlBrNJEAxSxAVAN5M0ViSemaVWdZF+VXnre5c3ybFNdikkGDTAQL75+7zFPn5Z rzvvj3Vu0/6mFsyQvilzGZO9gmXyrFFAXGPYcl5Ss9dfySHXI1Pr+t2HTtVwYG3M ISbgcKg2vid2qyDrCJ4pt8qdn2HoLw7jLMzjduW//m9fgBVWlPKDZ7rFG4p0JmET +Voq9+TXYE1dD4yCazU6xHzlA5i4FgX2Ukr4nY8Vfu1IM/bHArCYK879m1u5LXA3 cxKiVQ2937opON/kU1zzQ1HQfFRf/Ez6vQOW/9GU3cNgPzvVPDH7VUfitrU4qcqs kQ9i+rXenXuuYFC/phfXsXIuS7SNQZkz+soGvjSZh5BjNutWb/xyp6ZG8aUPSyRF MZK8X21siLZY/Q4KIwnKdvkn25eGd6eWUlsfApMhx/DL/vc/GET6vVKva5EplF69 dJC3zTRr9NZ7HhUqSZr8sIraUDhI/JWg5GbV3grc34tP5rQwanY4KH+24MEqGaCy iS2HNwiCmDP1+gV8vkck =0KAs -----END PGP SIGNATURE-----