Re: Upgrading to OpenSSL 1.1.0

On Wed, Jan 10, 2018 at 12:08 PM, Michael Tremer michael.tremer@ipfire.org wrote:

... So, again for me: What is the status of OpenVPN 2.4 now? I guess that should build with OpenSSL 1.1 out of the box.

I believe OpenSSL 1.1.0 is not supported by a few key packages, like OpenVPN and OpenSSH.

Here is the OpenVPN bug: https://community.openvpn.net/openvpn/ticket/759 . Here is the OpenSSH bug: https://github.com/openssh/openssh-portable/pull/48 .

OpenVPN and OpenSSH are going to have to shit or get off the pot. TLS 1.3 is in final draft stages, and it will be adopted soon.

Jeff