• ITUGLIB Update: OpenSSL 1.1.1 LTS Date

    From Randall@rsbecker@nexbridge.com to comp.sys.tandem on Thu Nov 17 08:54:29 2022
    From Newsgroup: comp.sys.tandem

    Hi All,
    Just letting everyone know that OpenSSL 1.1.1 official limited support date is now Sept 30, 2023, so that there is no confusion. So you have just under a year before that time. What this means is that only CVE fixes will follow that date. Functional fixes will not happen after that date. CVEs should continue for a while after that, but that might change. I will let this group know as the date approaches.
    If you are on 1.0.2... well, you know.
    When looking at binary compatibility for your applications, the version is important. However, different versions of OpenSSL can talk to each other as long as the TLS versions are compatible and both sides share the cyphers being used (and certificates of course). Some certificate forms need more modern implementations, so watch out for that.
    Regards,
    Randall Becker
    On behalf of the ITUGLIB Technical Committee
    --- Synchronet 3.21d-Linux NewsLink 1.2