Rocksolid Light

Welcome to novaBBS (click a section below)

mail  files  register  newsreader  groups  login

Message-ID:  

With your bare hands?!?

computers / comp.sys.tandem / Re: OpenSSL Support Notice

SubjectAuthor
* Re: OpenSSL Support NoticeRandall
`- Re: OpenSSL Support NoticeRandall

1
Re: OpenSSL Support Notice

<1e37a436-af04-4431-96fa-e09e9266d524n@googlegroups.com>

  copy mid

https://www.novabbs.com/computers/article-flat.php?id=601&group=comp.sys.tandem#601

  copy link   Newsgroups: comp.sys.tandem
X-Received: by 2002:a05:620a:2052:b0:745:d4b9:76bd with SMTP id d18-20020a05620a205200b00745d4b976bdmr1545088qka.11.1679581728112;
Thu, 23 Mar 2023 07:28:48 -0700 (PDT)
X-Received: by 2002:a25:1041:0:b0:b6b:e967:920d with SMTP id
62-20020a251041000000b00b6be967920dmr1780779ybq.13.1679581727837; Thu, 23 Mar
2023 07:28:47 -0700 (PDT)
Path: i2pn2.org!i2pn.org!usenet.blueworldhosting.com!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!peer03.iad!feed-me.highwinds-media.com!news.highwinds-media.com!news-out.google.com!nntp.google.com!postnews.google.com!google-groups.googlegroups.com!not-for-mail
Newsgroups: comp.sys.tandem
Date: Thu, 23 Mar 2023 07:28:47 -0700 (PDT)
In-Reply-To: <ee3f86d3-232e-4f1a-a0de-66079b40d5cen@googlegroups.com>
Injection-Info: google-groups.googlegroups.com; posting-host=2607:fea8:3fa9:4200:5c3c:b8e9:56f8:32c4;
posting-account=6VebZwoAAAAgrpUtsowyjrKRLNlqxnXo
NNTP-Posting-Host: 2607:fea8:3fa9:4200:5c3c:b8e9:56f8:32c4
References: <877cbcda-1403-484a-9cc2-f48716199eb8n@googlegroups.com> <ee3f86d3-232e-4f1a-a0de-66079b40d5cen@googlegroups.com>
User-Agent: G2/1.0
MIME-Version: 1.0
Message-ID: <1e37a436-af04-4431-96fa-e09e9266d524n@googlegroups.com>
Subject: Re: OpenSSL Support Notice
From: rsbec...@nexbridge.com (Randall)
Injection-Date: Thu, 23 Mar 2023 14:28:48 +0000
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Received-Bytes: 3584
 by: Randall - Thu, 23 Mar 2023 14:28 UTC

On Monday, February 20, 2023 at 12:30:31 p.m. UTC-5, Randall wrote:
> On Sunday, February 19, 2023 at 6:37:59 p.m. UTC-5, Randall wrote:
> > Hi Everyone,
> >
> > I want to remind people that the OpenSSL 1.1.1 version thread goes off support on Sept 11, 2023, which is 204 days from now - just over 6 months, meaning no security fixes will be available after that time. Currently, only security fixes are made available. After that, fixes will only be available via support contract (which I can facilitate, but it is not a trivial cost because of the OpenSSL extended support contract cost). ITUGLIB will stop building 1.1.1 releases when OpenSSL stops delivering fixes on (or around) that date. OpenSSL 1.0.2 is currently in this state.
> >
> > Migration to OpenSSL 3.x as soon as you can is recommended. There are a few reasons:
> >
> > 1. Functional and security fix support is currently available.
> > 2. Upgrading to 3.x generally only requires recompile for your application.
> > 3. OpenSSL versions 3.x, 1.1.1, and 1.0.2 can generally communicate with each other, as long as common cyphers are available at both ends - which they generally are. You do have to be careful to ensure that your certificates are usable on all versions.
> > 4. The 3.x thread is identical to the standard OpenSSL code base without change for NonStop. You can easily build OpenSSL yourself from git or with the standard OpenSSL tarballs. 1.1.1 requires that someone (usually me) apply patches manually to the ITUGLIB repository.
> > 5. An added bonus for git users on L-series (as well as OpenSSL users), you do not need to run PRNDG, because the NonStop build supports the x86 hardware random number generator.
> >
> > Regards,
> > Randall Becker
> > On Behalf of the ITUGLIB Technical Committee
> Edit: Should be PRNGD

OpenSSL 3.1 is in the pipeline now. This release seems to be primarily a result of FIPS-140-3 standards instead of the FIPS-140-2 used in 3.0. A bit of a surprise is that OpenSSL 3.1 planned support (LTS) runs until March 2025 while 3.0 runs until September 2026. ITUGLIB will be building and deploying both. The OpenSSL 3.1 notice should come out in the next day or two.

Re: OpenSSL Support Notice

<3be0984d-1d97-4e04-9aeb-bb299b1f99cdn@googlegroups.com>

  copy mid

https://www.novabbs.com/computers/article-flat.php?id=609&group=comp.sys.tandem#609

  copy link   Newsgroups: comp.sys.tandem
X-Received: by 2002:a05:622a:88:b0:3d6:9e1:569a with SMTP id o8-20020a05622a008800b003d609e1569amr6356712qtw.1.1680037487667;
Tue, 28 Mar 2023 14:04:47 -0700 (PDT)
X-Received: by 2002:a05:6902:1586:b0:b33:531b:3dd4 with SMTP id
k6-20020a056902158600b00b33531b3dd4mr8538032ybu.1.1680037487442; Tue, 28 Mar
2023 14:04:47 -0700 (PDT)
Path: i2pn2.org!i2pn.org!weretis.net!feeder8.news.weretis.net!feeder1.feed.usenet.farm!feed.usenet.farm!peer01.ams4!peer.am4.highwinds-media.com!news.highwinds-media.com!peer03.ams1!peer.ams1.xlned.com!news.xlned.com!feeder1.cambriumusenet.nl!feed.tweak.nl!209.85.160.216.MISMATCH!news-out.google.com!nntp.google.com!postnews.google.com!google-groups.googlegroups.com!not-for-mail
Newsgroups: comp.sys.tandem
Date: Tue, 28 Mar 2023 14:04:47 -0700 (PDT)
In-Reply-To: <1e37a436-af04-4431-96fa-e09e9266d524n@googlegroups.com>
Injection-Info: google-groups.googlegroups.com; posting-host=2607:fea8:3fa9:4200:ec8a:846:c692:7694;
posting-account=6VebZwoAAAAgrpUtsowyjrKRLNlqxnXo
NNTP-Posting-Host: 2607:fea8:3fa9:4200:ec8a:846:c692:7694
References: <877cbcda-1403-484a-9cc2-f48716199eb8n@googlegroups.com>
<ee3f86d3-232e-4f1a-a0de-66079b40d5cen@googlegroups.com> <1e37a436-af04-4431-96fa-e09e9266d524n@googlegroups.com>
User-Agent: G2/1.0
MIME-Version: 1.0
Message-ID: <3be0984d-1d97-4e04-9aeb-bb299b1f99cdn@googlegroups.com>
Subject: Re: OpenSSL Support Notice
From: rsbec...@nexbridge.com (Randall)
Injection-Date: Tue, 28 Mar 2023 21:04:47 +0000
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Received-Bytes: 4009
 by: Randall - Tue, 28 Mar 2023 21:04 UTC

On Thursday, March 23, 2023 at 10:28:49 a.m. UTC-4, Randall wrote:
> On Monday, February 20, 2023 at 12:30:31 p.m. UTC-5, Randall wrote:
> > On Sunday, February 19, 2023 at 6:37:59 p.m. UTC-5, Randall wrote:
> > > Hi Everyone,
> > >
> > > I want to remind people that the OpenSSL 1.1.1 version thread goes off support on Sept 11, 2023, which is 204 days from now - just over 6 months, meaning no security fixes will be available after that time. Currently, only security fixes are made available. After that, fixes will only be available via support contract (which I can facilitate, but it is not a trivial cost because of the OpenSSL extended support contract cost). ITUGLIB will stop building 1.1.1 releases when OpenSSL stops delivering fixes on (or around) that date. OpenSSL 1.0.2 is currently in this state.
> > >
> > > Migration to OpenSSL 3.x as soon as you can is recommended. There are a few reasons:
> > >
> > > 1. Functional and security fix support is currently available.
> > > 2. Upgrading to 3.x generally only requires recompile for your application.
> > > 3. OpenSSL versions 3.x, 1.1.1, and 1.0.2 can generally communicate with each other, as long as common cyphers are available at both ends - which they generally are. You do have to be careful to ensure that your certificates are usable on all versions.
> > > 4. The 3.x thread is identical to the standard OpenSSL code base without change for NonStop. You can easily build OpenSSL yourself from git or with the standard OpenSSL tarballs. 1.1.1 requires that someone (usually me) apply patches manually to the ITUGLIB repository.
> > > 5. An added bonus for git users on L-series (as well as OpenSSL users), you do not need to run PRNDG, because the NonStop build supports the x86 hardware random number generator.
> > >
> > > Regards,
> > > Randall Becker
> > > On Behalf of the ITUGLIB Technical Committee
> > Edit: Should be PRNGD
> OpenSSL 3.1 is in the pipeline now. This release seems to be primarily a result of FIPS-140-3 standards instead of the FIPS-140-2 used in 3.0. A bit of a surprise is that OpenSSL 3.1 planned support (LTS) runs until March 2025 while 3.0 runs until September 2026. ITUGLIB will be building and deploying both. The OpenSSL 3.1 notice should come out in the next day or two.

A good read on the 1.1.1 End of Life is available at https://www.openssl.org/blog/blog/2023/03/28/1.1.1-EOL/

1
server_pubkey.txt

rocksolid light 0.9.8
clearnet tor