[Bug 63671] libtcnative does not compile with OpenSSL < 1.1.0 and APR w/o threading support
https://bz.apache.org/bugzilla/show_bug.cgi?id=63671 --- Comment #6 from Michael Osipov --- (In reply to Michael Osipov from comment #5) > (In reply to Mark Thomas from comment #2) > > I think INVALID would have been a better resolution here. OpenSSL 1.1.0 and > > earlier are no longer supported. > > > > There are probably still OpenSSL 1.1.0 and earlier specific workarounds in > > the Tomcat Native code base. We should be removing that cruft rather than > > continuing to fix build issues with unsupported OpenSSL versions. > > I concur because many OS vendors still bundle 1.0.2 and provide fixes to > those. Only upstream is not supported anymore. E.g., default OpenSSL on RHEL > 7 is still 1.0.2, as sad as it sounds. Here is the ref: https://access.redhat.com/discussions/4285911 I think that a potentional libtcnative 2.0 can drop pre-1.1.1 support. -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
[Bug 63671] libtcnative does not compile with OpenSSL < 1.1.0 and APR w/o threading support
https://bz.apache.org/bugzilla/show_bug.cgi?id=63671 --- Comment #5 from Michael Osipov --- (In reply to Mark Thomas from comment #2) > I think INVALID would have been a better resolution here. OpenSSL 1.1.0 and > earlier are no longer supported. > > There are probably still OpenSSL 1.1.0 and earlier specific workarounds in > the Tomcat Native code base. We should be removing that cruft rather than > continuing to fix build issues with unsupported OpenSSL versions. I concur because many OS vendors still bundle 1.0.2 and provide fixes to those. Only upstream is not supported anymore. E.g., default OpenSSL on RHEL 7 is still 1.0.2, as sad as it sounds. -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
[Bug 63671] libtcnative does not compile with OpenSSL < 1.1.0 and APR w/o threading support
https://bz.apache.org/bugzilla/show_bug.cgi?id=63671 --- Comment #4 from Mark Thomas --- It is 1.0.2 that is required for FIPS support (and 1.0.2 is currently the minimum required OpenSSL version for Tomcat Native). Yes, that is a good reason not to start removing the support for 1.0.2/1.1.0 just yet. We need to factor in the timing of OpenSSL 3.0 as we figure out what we want to do with the APR/Native connector in Tomcat 10 and the impact that has on a possible Tomcat Native 2.0 -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
[Bug 63671] libtcnative does not compile with OpenSSL < 1.1.0 and APR w/o threading support
https://bz.apache.org/bugzilla/show_bug.cgi?id=63671 --- Comment #3 from George Stanchev --- Would keeping 1.0.1 for the FIPS support be incentive not to deprecate/remove support for 1.0.1 completely? -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
[Bug 63671] libtcnative does not compile with OpenSSL < 1.1.0 and APR w/o threading support
https://bz.apache.org/bugzilla/show_bug.cgi?id=63671 --- Comment #2 from Mark Thomas --- I think INVALID would have been a better resolution here. OpenSSL 1.1.0 and earlier are no longer supported. There are probably still OpenSSL 1.1.0 and earlier specific workarounds in the Tomcat Native code base. We should be removing that cruft rather than continuing to fix build issues with unsupported OpenSSL versions. -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
[Bug 63671] libtcnative does not compile with OpenSSL < 1.1.0 and APR w/o threading support
https://bz.apache.org/bugzilla/show_bug.cgi?id=63671 Michael Osipov changed: What|Removed |Added Resolution|--- |FIXED Status|NEW |RESOLVED --- Comment #1 from Michael Osipov --- Fix in 1.2.24 and onwards. -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
[Bug 63671] libtcnative does not compile with OpenSSL < 1.1.0 and APR w/o threading support
https://bz.apache.org/bugzilla/show_bug.cgi?id=63671 Michael Osipov changed: What|Removed |Added CC||micha...@apache.org -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
