From mboxrd@z Thu Jan 1 00:00:00 1970 From: Michael Tremer To: development@lists.ipfire.org Subject: Upgrading to OpenSSL 1.1.0 Date: Wed, 29 Nov 2017 13:12:05 +0000 Message-ID: <1511961125.2571.98.camel@ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============0775255593850221641==" List-Id: --===============0775255593850221641== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hello, I have started working on upgrading the entire distribution to OpenSSL 1.1.0. This is however not the easiest task since many packages are just incompatible with the API changes of OpenSSL. Therefore, I started this in an own branch, upgraded all sorts of packages th= at won't build and patched those who could be patched. However, this is still qu= ite chaotic and I need some help of the maintainers of some of the packages to do this for their own packages. I have already dropped some packages in this process that a) were incompatible with OpenSSL 1.1.0, b) where no patches were available and c) that are not maintained upstream any longer. I also cherry-picked those commits to the current next tree. If someone disagrees, please open a separate discussion. The packages dropped are: * Pound * vsftp * sslscan Packages which currently don't build and I could not patch very easily: * php * asterisk * openvpn I suppose Erik is best to upgrade to openvpn 2.4, Dirk upgrades asterisk and I am quite sure that there is a few people out there who have been working on p= hp. Please raise your hands. I would like to have the openssl 1.1 branch ready for merge into next at the = end of December. Please make sure that any patches have been submitted until then. Please work on top of this branch: https://git.ipfire.org/pub/git/people/ms/ipfire-2.x.git openssl-11 https://git.ipfire.org/?p=3Dpeople/ms/ipfire-2.x.git;a=3Dshortlog;h=3Drefs/= heads/openssl-11 Please also submit improvements of other packages that we can make sure of (i= .e. better cipher suites for Apache, etc.)... Best, -Michael --===============0775255593850221641== Content-Type: application/pgp-signature Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="signature.asc" MIME-Version: 1.0 LS0tLS1CRUdJTiBQR1AgU0lHTkFUVVJFLS0tLS0KCmlRSXpCQUFCQ2dBZEZpRUU1L3JXNWwzR0dl Mnlwa3R4Z0hudy8yK1FDUWNGQWxvZXNpVUFDZ2tRZ0hudy8yK1EKQ1FlY2dnLy9iaEdQdS96bDRH WUtleExoQ2hGZENBd0NmcXFXZmpmTG81Si9WL3FabXBPNXQ5eXlmcjlwTGJhSApRYXFUdFhGUXp3 UkRlT1B0NkxFb1RUcUx1TDF6SXZ3U21pTGR3MHNhTHllenJBeVFReXJGRkhwUmtoVWFBT0hnCkhP QXBBbksrdy9GS0pSNHRLN3NJSW8wY0MyeDJNYnJKYm9FcXI2c0ZSMjRldUMyNVZERGs0eS93WWdJ VFZXNi8KZHYyNGlHandFVUpycTN3OENPVGxsZElCQzJPNmVRc0VmRWF1MjRxd1VCSHdiQUhLNkZC elFHOXRpd0IyanhHVwpRNTFlYjlQbGQrM3RDTGlHcWlSZmlZZC82TGl3Rm92KzMzbGQ3cnYwQkNW SUhGb3pHc2JmWG04ZytxUGxBRklZCk14aFpkaitzSmMvcm5PQ0swL3pPYkQ5b1lYSWU3ejJRSjJF TTF1MUY4eXR1N3ZCN015UmZCUHVrSDhQZ3p2QjkKOWJlcHBKaWVnY2N3UkEyM3c4cnpVUnBMQUxW V21vUURWQVArb1BQWjZ2eURaUThqN3c2ZW5ldWpGVGJLY2pYawo5S2pDTU4wUUhxUEM3QmV0QzJt MVRHQ1p1czhQMmpobkphMFpFVmJxLytXbGtqeTM3dzQ2RXJVcWkweUQzLys0CkpkaDNvaUVvbDRt R2FlVkEwQjJyT0Mxa04wRUIvVEFvNWZIcCtzWVRjR3llZHdma2hsTkR0RHVySjE0ZHVMcmUKRytv L0tRL1ZBRjhiQ2E4T1dIbFVZeFdMckF1TUZ3aVBkaUdUVGhPT0pTQ2pJUGU2Y3ZMbVI0NEFKTnk3 YVAvLwpGdStIMUh6S2QwQ3hLakIvN1Uvckh4MFEra21OZ29HMVBQM0dHNSsra3p1U1RFaHJBUzg9 Cj1TSzBGCi0tLS0tRU5EIFBHUCBTSUdOQVRVUkUtLS0tLQo= --===============0775255593850221641==--