httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Joe Orton <jor...@redhat.com>
Subject Re: RFC: drop support for OpenSSL < 1.0 in trunk/2.3?
Date Wed, 02 Jun 2010 18:49:49 GMT
On Wed, Jun 02, 2010 at 01:18:17PM -0500, William Rowe wrote:
> On 6/2/2010 11:23 AM, Joe Orton wrote:
> > Thanks very much for all the responses.  There is strong consensus for 
> > retaining support for some varieties of 0.9.8 and possibly some 0.9.7.
> > 
> > A new RFC, then, for trunk/2.3 and beyond:
> > 
> > - support and build with OpenSSL >= 0.9.7a, albeit with (harmless)
> >   compiler warnings about argument const-ness all over the shop
> 
> The reason I'm not keen on this is that 0.9.7 is missing security fixes
> and will never receive another refresh.  So it's certainly not recommended
> anymore for 2.0 or 2.2, nevermind 'the next' release.

I'm with you on this, but comments in this thread about wanting to keep 
support for RHEL4 and Solaris 10 native (patched) 0.9.7* are not 
unreasonable.

> I don't think we need to go out of our way to break it, but if there are
> tests for 0.9.7'ness (or 0.9.8-initial) we won't need those tests anymore.

Right, yup, that's basically what I propose.

Regards, Joe

Mime
View raw message