Re: Minimum OpenSSL version

2023-12-05 Thread Brian Neradt
+1 On Tue, Dec 5, 2023 at 10:07 AM Bryan Call wrote: > +1 > > -Bryan > > > > > On Nov 14, 2023, at 12:24 PM, Masakazu Kitajo wrote: > > > > Hi all, > > > > At the weekly ATS 10 meeting, the participants agreed to bump the minimum > > OpenSSL version we support on ATS 10, and it's going to be 1.

Re: Minimum OpenSSL version

2023-12-05 Thread Bryan Call
+1 -Bryan > On Nov 14, 2023, at 12:24 PM, Masakazu Kitajo wrote: > > Hi all, > > At the weekly ATS 10 meeting, the participants agreed to bump the minimum > OpenSSL version we support on ATS 10, and it's going to be 1.1.1. I'm > sending this email to make that an official decision. > > The

Re: Minimum OpenSSL version

2014-09-24 Thread James Peach
On Sep 24, 2014, at 8:40 AM, Susan Hinrichs wrote: > Noticed something in the RHEL5 build while tracking down build errors. For > RHEL5 master build TS_USE_TLS_SNI is not defined which means the function > SSL_CTX_set_tlsext_servername_callback is not set in the version of openssl > used by

Re: Minimum OpenSSL version

2014-09-24 Thread Susan Hinrichs
The function SSL_set_SSL_CTX is missing in openssl 0.9.7 and also not accessible in the RHEL5 builds. On 9/24/2014 10:40 AM, Susan Hinrichs wrote: Noticed something in the RHEL5 build while tracking down build errors. For RHEL5 master build TS_USE_TLS_SNI is not defined which means the funct

Re: Minimum OpenSSL version

2014-09-24 Thread Susan Hinrichs
Noticed something in the RHEL5 build while tracking down build errors. For RHEL5 master build TS_USE_TLS_SNI is not defined which means the function SSL_CTX_set_tlsext_servername_callback is not set in the version of openssl used by RHEL5. This means that SSL certificate support in 5.x will

Re: Minimum OpenSSL version

2014-09-21 Thread Leif Hedstrom
The minimum version of any dependent package is (currently) what RHEL5 provides. We could simply list those I think? -- Leif > On Sep 21, 2014, at 6:23 PM, Brian Geffon wrote: > > Hi All, > > This is something that apparently has never been brought up, we don't have > a strict OpenSSL mini

Re: Minimum OpenSSL version

2014-09-21 Thread Brian Geffon
Ok, so I just found this in SSLUtils.cc: #if (OPENSSL_VERSION_NUMBER < 0x00090400L)# error Traffic Server requires an OpenSSL library version 0.9.4 or greater #endif On Sun, Sep 21, 2014 at 5:31 PM, James Peach wrote: > > On Sep 21, 2014, at 5:23 PM, Brian Geffon wrote: > > > Hi All, > > >

Re: Minimum OpenSSL version

2014-09-21 Thread James Peach
On Sep 21, 2014, at 5:23 PM, Brian Geffon wrote: > Hi All, > > This is something that apparently has never been brought up, we don't have > a strict OpenSSL minimum version. By explicitly stating our minimum > supported OpenSSL version we can clean up our SSL code, specifically around > the SNI