Hi,

Didn't we have this discussion before?  Gert basically NAK'd removing
support for a library version in a dot-release, which I think is valid
reasoning (even though I really would like to drop 0.9.8).

Anyway, to fill in the facts:

On 22-01-18 15:55, David Sommerseth wrote:
> On 22/01/18 15:12, Simon Matter wrote:
>>> On 20/01/18 18:22, Selva Nair wrote:
>>>> Does openvpn-vagrant include any VM provisioning with
>>>> openssl-0.9.8? Until recently I had access to a few old
>>>> debian boxes but now all updated and 0.9.8 testing is getting
>>>> harder.
>>> 
>>> Let me rather twist this question around ... Do we want to
>>> support OpenSSL 0.9.8?  Are there any Linux distributions or
>>> other OSes out there in the wild which is still supported which
>>> are also based on openssl-0.9.8?
>> 
>> If it's possible without too many headaches, I'd appreciate if 
>> openssl-0.9.8 support would be kept in during the 2.4 series.
> 
> Can you elaborate more on your use case?  Keeping something just to
> keep something is kind of a poor argument.  But of course, it goes
> the other way around too, we shouldn't kick it out just to kick it
> out either.
> 
> Currently, I'm mostly concerned that keeping the support span from
> 0.9.8 to 1.1.x can lead to maintenance challenges in the longer run
> - especially if the use cases are poor.
> 
> To me it then gets crucial that users needing openssl-0.9.8 have
> access to a maintained distribution of that particular OpenSSL
> version.  Otherwise, we're deluding OpenVPN users it is safe to use
> openssl-0.9.8.

SLES11 supports 0.9.8 upto 2022:

https://www.suse.com/LinuxPackages/packageRouter.jsp?product=server&version=11&service_pack=&architecture=i386&package_name=openssl

https://www.suse.com/lifecycle/

> So if we don't have really strong arguments keeping support for
> this old version, we should carefully consider our options.

We already removed support for < 1.0.1 in the master branch.  Maybe
just make sure we can get 2.5 out, and move forward that way :)

-Steffan

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to