On Tue, Sep 18, 2018 at 11:19:10AM -0500, William A Rowe Jr wrote: > On Tue, Sep 18, 2018 at 2:43 AM Joe Orton <jor...@redhat.com> wrote: > > You'll likely see issues testing against OpenSSL 1.1.1 until the TLSv1.3 > > merge is integrated for 2.4.x, yeah, I wouldn't worry about that. > > But I think this is worth highlighting in our Announcement, that we would > strongly caution users to build 2.4.35 against OpenSSL 1.1.0. (And we > could tease the forthcoming 2.4 release as building against 1.1.1/TLS 1.3.)
Good idea. How about this, to insert after the "This release requires the Apache Portable Runtime (APR)," paragraph? """ This release is compatible with OpenSSL versions from 0.9.8a to 1.1.0 only, and does not support TLSv1.3. Future releases of httpd 2.4 are expected to add compatibility with OpenSSL 1.1.1 and enable support for TLSv1.3. """ Regards, Joe
