[oi-dev] OpenSSL-1.0.2 deprecated

[Bob Friesenhahn]

On Fri, 10 Jan 2020, Andreas Wacknitz wrote:

> According to https://www.openssl.org/policies/releasestrat.html LTS for
> OpenSSL 1.0.2 ended 31/12/2019.
> Do we need work on Version 1.1.1? It will be supported until 2023-09-11
> (LTS).

Updating should be done, but expect that it will be rather painful. 
The updated version has deprecated and removed interfaces which were 
often used before.  For example, previously code would instantiate a 
structure (e.g. on the stack, or using malloc()), initialize it, and 
use it directly, but now the interface structure definitions are 
opaque (only forward declared) and one must use constructor/destructor 
functions provided by OpenSSL.  Luckily, other interfaces appear to be 
mostly unchanged.

Updating OpenSSL will likely require updating dependent applications 
to versions which are new enough to already be ported to 1.1.1.  The 
alternative is to port older applications to work with 1.1.1.  Porting 
applications is not hard, but it is tedious.

Bob
-- 
Bob Friesenhahn
bfriesen at simple.dallas.tx.us, http://www.simplesystems.org/users/bfriesen/
GraphicsMagick Maintainer,    http://www.GraphicsMagick.org/
Public Key,     http://www.simplesystems.org/users/bfriesen/public-key.txt