Re: Minimum OpenSSL version

2023-12-05 Thread Brian Neradt
+1 On Tue, Dec 5, 2023 at 10:07 AM Bryan Call wrote: > +1 > > -Bryan > > > > > On Nov 14, 2023, at 12:24 PM, Masakazu Kitajo wrote: > > > > Hi all, > > > > At the weekly ATS 10 meeting, the participants agreed to bump the minimum > > Open

Re: Minimum OpenSSL version

2023-12-05 Thread Bryan Call
+1 -Bryan > On Nov 14, 2023, at 12:24 PM, Masakazu Kitajo wrote: > > Hi all, > > At the weekly ATS 10 meeting, the participants agreed to bump the minimum > OpenSSL version we support on ATS 10, and it's going to be 1.1.1. I'm > sending this email to make that

Minimum OpenSSL version

2023-11-14 Thread Masakazu Kitajo
Hi all, At the weekly ATS 10 meeting, the participants agreed to bump the minimum OpenSSL version we support on ATS 10, and it's going to be 1.1.1. I'm sending this email to make that an official decision. The version bump is only for ATS 10 and later. There is no change for ATS 8 a

Re: Minimum OpenSSL version

2014-09-24 Thread James Peach
On Sep 24, 2014, at 8:40 AM, Susan Hinrichs wrote: > Noticed something in the RHEL5 build while tracking down build errors. For > RHEL5 master build TS_USE_TLS_SNI is not defined which means the function > SSL_CTX_set_tlsext_servername_callback is not set in the version of openssl > used by

Re: Minimum OpenSSL version

2014-09-24 Thread Susan Hinrichs
The function SSL_set_SSL_CTX is missing in openssl 0.9.7 and also not accessible in the RHEL5 builds. On 9/24/2014 10:40 AM, Susan Hinrichs wrote: Noticed something in the RHEL5 build while tracking down build errors. For RHEL5 master build TS_USE_TLS_SNI is not defined which means the funct

Re: Minimum OpenSSL version

2014-09-24 Thread Susan Hinrichs
Noticed something in the RHEL5 build while tracking down build errors. For RHEL5 master build TS_USE_TLS_SNI is not defined which means the function SSL_CTX_set_tlsext_servername_callback is not set in the version of openssl used by RHEL5. This means that SSL certificate support in 5.x will

Re: Minimum OpenSSL version

2014-09-21 Thread Leif Hedstrom
The minimum version of any dependent package is (currently) what RHEL5 provides. We could simply list those I think? -- Leif > On Sep 21, 2014, at 6:23 PM, Brian Geffon wrote: > > Hi All, > > This is something that apparently has never been brought up, we don't have > a strict OpenSSL mini

Re: Minimum OpenSSL version

2014-09-21 Thread Brian Geffon
Ok, so I just found this in SSLUtils.cc: #if (OPENSSL_VERSION_NUMBER < 0x00090400L)# error Traffic Server requires an OpenSSL library version 0.9.4 or greater #endif On Sun, Sep 21, 2014 at 5:31 PM, James Peach wrote: > > On Sep 21, 2014, at 5:23 PM, Brian Geffon wrote: > > > Hi All, > > >

Re: Minimum OpenSSL version

2014-09-21 Thread James Peach
On Sep 21, 2014, at 5:23 PM, Brian Geffon wrote: > Hi All, > > This is something that apparently has never been brought up, we don't have > a strict OpenSSL minimum version. By explicitly stating our minimum > supported OpenSSL version we can clean up our SSL code, specifically around > the SNI

Minimum OpenSSL version

2014-09-21 Thread Brian Geffon
Hi All, This is something that apparently has never been brought up, we don't have a strict OpenSSL minimum version. By explicitly stating our minimum supported OpenSSL version we can clean up our SSL code, specifically around the SNI #ifdefs. I'm going to propose that we make *0.9.8f* our minimum