novaBBS - comp.sys.tandem - ITUGLIB Update: OpenSSL 1.1.1 LTS Date

ITUGLIB Update: OpenSSL 1.1.1 LTS Date

<eeb7abf8-580a-42e4-ab7f-082fd1025184n@googlegroups.com>

https://www.novabbs.com/computers/article-flat.php?id=579&group=comp.sys.tandem#579

X-Received: by 2002:ad4:528b:0:b0:4bb:781e:6232 with SMTP id v11-20020ad4528b000000b004bb781e6232mr3199472qvr.15.1668704070149;
Thu, 17 Nov 2022 08:54:30 -0800 (PST)
X-Received: by 2002:a25:870e:0:b0:6dd:62f4:f356 with SMTP id
a14-20020a25870e000000b006dd62f4f356mr2811277ybl.340.1668704069930; Thu, 17
Nov 2022 08:54:29 -0800 (PST)
Path: i2pn2.org!i2pn.org!usenet.blueworldhosting.com!feed1.usenet.blueworldhosting.com!peer03.iad!feed-me.highwinds-media.com!news.highwinds-media.com!news-out.google.com!nntp.google.com!postnews.google.com!google-groups.googlegroups.com!not-for-mail
Newsgroups: comp.sys.tandem
Date: Thu, 17 Nov 2022 08:54:29 -0800 (PST)
Injection-Info: google-groups.googlegroups.com; posting-host=2607:fea8:3f9d:3b00:412:d098:fd36:dfcf;
posting-account=6VebZwoAAAAgrpUtsowyjrKRLNlqxnXo
NNTP-Posting-Host: 2607:fea8:3f9d:3b00:412:d098:fd36:dfcf
User-Agent: G2/1.0
MIME-Version: 1.0
Message-ID: <eeb7abf8-580a-42e4-ab7f-082fd1025184n@googlegroups.com>
Subject: ITUGLIB Update: OpenSSL 1.1.1 LTS Date
From: rsbec...@nexbridge.com (Randall)
Injection-Date: Thu, 17 Nov 2022 16:54:30 +0000
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Received-Bytes: 1992

by: Randall - Thu, 17 Nov 2022 16:54 UTC

Hi All,

Just letting everyone know that OpenSSL 1.1.1 official limited support date is now Sept 30, 2023, so that there is no confusion. So you have just under a year before that time. What this means is that only CVE fixes will follow that date. Functional fixes will not happen after that date. CVEs should continue for a while after that, but that might change. I will let this group know as the date approaches.

If you are on 1.0.2... well, you know.

When looking at binary compatibility for your applications, the version is important. However, different versions of OpenSSL can talk to each other as long as the TLS versions are compatible and both sides share the cyphers being used (and certificates of course). Some certificate forms need more modern implementations, so watch out for that.

Regards,
Randall Becker
On behalf of the ITUGLIB Technical Committee

"The medium is the message." -- Marshall McLuhan

computers / comp.sys.tandem / ITUGLIB Update: OpenSSL 1.1.1 LTS Date

Subject	Author
ITUGLIB Update: OpenSSL 1.1.1 LTS Date	Randall