Hi,

The most recent version of commons-crypto (1.2.0, released January 
2023<https://github.com/apache/commons-crypto/releases/tag/rel%2Fcommons-crypto-1.2.0>)
 supports up to OpenSSL 1.1.x. I see in the unreleased changelog that OpenSSL 
3.x is supported on the main  
branch<https://github.com/apache/commons-crypto/blob/6ae5a4dafec2f8df0b95c8e89a4e5fefd8206b04/src/changes/changes.xml#L112>
 (there’s also the recent 
OpenSsl30XNativeJna.java<https://github.com/apache/commons-crypto/blob/6ae5a4dafec2f8df0b95c8e89a4e5fefd8206b04/src/main/java/org/apache/commons/crypto/jna/OpenSsl30XNativeJna.java>,
 so looks like it’s now supported).

For context, Ubuntu 20.04 LTS goes end-of-life in a couple of months, at the 
end of April 
2025<https://ubuntu.com/about/release-cycle#:~:text=Apr%202034-,20.04%20LTS%20(Focal%20Fossa),May%202025,-Apr%202030>.
 The next Ubuntu LTS (22.04) starts using OpenSSL 
3.x<https://packages.ubuntu.com/jammy/libssl3>. We need to update all our 
services/products to use 22.04 before this date, but we rely on commons-crypto 
for significant performance gains in many of them, so can’t start migration for 
a subset of our products before a new commons-crypto release supporting OpenSSL 
3.x occurs.

Would it be possible to perform a release for commons-crypto? If it’s already 
scheduled, is there any chance an estimated timeline for the release could be 
shared?

Many thanks for maintaining commons-crypto amongst the other Apache Commons 
projects we use,
Callum Rogers

Reply via email to