[oi-dev] OpenSSL update process

Aurélien Larcher aurelien.larcher at gmail.com
Sat Feb 6 20:56:55 UTC 2021


OpenSSL 1.1 is now merged:

1. The mediator is default set to 1.0 but can be safely set to 1.1.
2. illumos-gate is patched to accept library/security/openssl-11 as
dependency so that it builds when the mediator version is 1.1.
3. oi-userland has now a switch USE_OPENSSL10=yes or USE_OPENSSL11=yes
which should be placed before shared-macros.mk is included.
4. If 'gmake update' is executed in a component depending on OpenSSL then
the switch is made to OpenSSL 1.1 unless USE_OPENSSL10=yes is set.

Now the fun begins:

3. Move all the components supporting OpenSSL 1.1 or update them.
> 4. Deprecate possible rotting components which cannot be updated and may
> cause security issues.
>

and... the more, the merrier!


Cheers
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://openindiana.org/pipermail/oi-dev/attachments/20210206/bea7e14a/attachment.html>


More information about the oi-dev mailing list