On 5/23/2013 10:49 AM, Krzysztof Kwiatkowski wrote:
Hello,
I want to use OpenSSL in one of my project. As the project will run on
production servers I'm wondering which branch should I use. Could you
tell me what's the difference between OpenSSL 1.0.0 and 1.0.1 ? I'm
guessing that 1.0.1 contains some experimental code, so is less suitable
for production, but need to confirm my guessing.
I cannot speak for the project, but the way I understand it, OpenSSL
does not use the odd=experimental, even=stable rule of some other
projects.
Rather, experimental code is not released with a final version number
at all (though there will obviously be a placeholder version number
in the unreleased code).
1.0.1 contains additional features over 1.0.0, but almost no
backward incompatibilities.
1.0.1a, b, c, etc. are patch releases that try to be as binary
compatible (for documented APIs) with 1.0.1 as possible, and
with no additional features from 1.0.1. There were some minor
API adjustments in the 1.0.1 series to fix existing compatibility
bugs.
It should also be noted that the current FIPS certified module
(meaningful only for US Government use) is designed for use with
1.0.1, while the previous one was for version 0.9.7 , which gives
version 1.0.1 and artificially extended lifespan compared to other
version series.
There is some information on this subjects at
<http://www.openssl.org/news/state.html>
though that page contains some misprints and is a few months out
of date (as is the main news page).
I think the page should say something like:
* Next proposed minor releases: OpenSSL 0.9.8z, 1.0.0l and 1.0.1f,
currently in development.
* The release date is yet to be set.
* Next proposed FEATURE release: OpenSSL 1.0.2, currently in
development.
* Next proposed MAJOR release: OpenSSL 1.1.0, currently in development.
* The release date is yet to be set.
* The current CVS Source Code State
<http://www.openssl.org/source/cvs/>
Enjoy
Jakob
--
Jakob Bohm, CIO, Partner, WiseMo A/S. http://www.wisemo.com
Transformervej 29, 2730 Herlev, Denmark. Direct +45 31 13 16 10
This public discussion message is non-binding and may contain errors.
WiseMo - Remote Service Management for PCs, Phones and Embedded
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [email protected]
