Hi all,

I'd like to propose having the minimum "version" for BoringSSL for ATS 10.
Since BoringSSL does not have versions, obviously they do not follow
semantic versioning. We can only pick a random commit hash to draw a line,
and drawing the line does not guarantee anything in terms of compatibility
unlike the one for OpenSSL. However, it would allow us to clean up
unnecessary code/check for too old BoringSSL at a minimum. For example, a
constant, TLS1_3_VERSION, has been available since 2016, and OpenSSL 1.1.1
has it too. There is no reason to check the availability (if we bump the
minimum OpenSSL version to 1.1.1).

If we agree on having the minimum version (or oldest commit) for BoringSSL,
I'd suggest this commit below:
https://boringssl.googlesource.com/boringssl/+/a1843d660b47116207877614af53defa767be46a

It's almost a random pick, but I think it's a reasonable commit hash
because everything I mentioned at the summit worked fine with it. And it's
also new enough to use with Quiche.

Let me know if you have any comments.

Thanks,
Masakazu

Reply via email to