https://bz.apache.org/bugzilla/show_bug.cgi?id=63671
--- Comment #4 from Mark Thomas <ma...@apache.org> --- It is 1.0.2 that is required for FIPS support (and 1.0.2 is currently the minimum required OpenSSL version for Tomcat Native). Yes, that is a good reason not to start removing the support for 1.0.2/1.1.0 just yet. We need to factor in the timing of OpenSSL 3.0 as we figure out what we want to do with the APR/Native connector in Tomcat 10 and the impact that has on a possible Tomcat Native 2.0 -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org