On Mon, Jul 26, 2010, no_spam...@yahoo.com wrote: > > I've browsed through about a year's worth of the openssl-users and > openssl-dev > mail list archives in search of some information. I think I found most of > what > I'm looking for, but I want to summarize my questions and my understanding of > the current situation for your review: > > 1) I've seen several questions regarding support for TLS v1.1 and v1.2, and > I've > seen Dr. Henson patiently repeat that TLS v1.1 functionality is slated for > 1.1.0 > and probably 1.0.1 as well. (In fact, according to ChangeLog it looks like > initial support for TLS v1.1 is in 1.0.1.) I have never seen any definitive > statement regarding the plan to back port TLS v1.1 (or v1.2) functionality to > the 0.9.8 development branch. It is my assumption, therefore, that there are > no > plans to do so at this time. Is that correct? >
Yes TLS 1.1 support is now in HEAD (which will be OpenSSL 1.1 in future) and it has been backported to 1.0.1. The new versioning scheme means that only bugfixes and no new features will be backported to stable branches. So it will never officially appear in 0.9.8. > 2) It sounds like the intent of the OpenSSL.org team is to support the 0.9.8 > development branch well into the foreseeable future (at least a couple of > years > from now). However, in light of number (1) above, I believe that it will be > mostly bug/security-related fixes and minor functionality improvements. Is > that > correct? (I'm sure it may be a function of paid ($$$) requests for new > functionality too.) > Yes, OpenSSL 0.9.7 is no longer maintained but 0.9.8 will continue to include bug and security fixes for some time. Currently the only version of OpenSSL that is FIPS 140-2 capable is 0.9.8 and a fair bit of software depends on it so it isn't going away any time soon. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
