Hello,

In line with ISC's deprecation policy, I am notifying the mailing list
of our intent to remove the support of OpenSSL 1.x Engines in
favor of OpenSSL 3.x Providers.

The OpenSSL 3.0 has introduced new way how to extend OpenSSL
with "Providers" and the old "Engines" have been deprecated and
they require special compile time options to be enabled.

As OpenSSL 1.1.x is no longer supported by OpenSSL and is present
only in RHEL 8, we are now removing support for OpenSSL Engines
from BIND 9.21 (the next development version).

The support for OpenSSL Providers is already present in BIND 9.20
and it is the preferred way how to interact with PKCS#11 Hardware
Security Modules.

Ondrej
--
Ondřej Surý (He/Him)
ond...@isc.org

My working hours and your working hours may be different. Please do not feel 
obligated to reply outside your normal working hours.

-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to