On Thu, Sep 30, 2021 at 09:18:23AM -0400, Greg Troxel wrote: > The real question is what kind of pace of update is best, as maintained > upstreams are going to make releases that work with openssl3, and not > being first makes life easier. > > I suspect in a few weeks we'll have a better idea.
I am trying hard to make a branch for netbsd-10 actually possible in the very near future. We have only few remaining hard blockers. > > We can't do that. Instead, at some point (probably a bit past the two > > years 1.1 will still receive updates) we will have to bite and switch > > netbsd-9 over to pkgsrc based openssl. > > I don't know what you mean exactly. Certainly at some point pkgsrc > builds on 9 will use pkgsrc openssl. Perhaps long before that. But I > don't see how e.g. postfix in base is going to use pkgsrc openssl. Right, so the admin of an affected machine would have to choose: - update to newer netbsd - update to use pkgsrc postfix - live with outdated openssl Martin
