Re: Choice of the openssl version for 23.10 and 24.04

2023-12-16 Thread Adrien Nader
On Thu, Dec 14, 2023, Seth Arnold wrote: > On Mon, Dec 04, 2023 at 10:28:02AM +0100, Adrien Nader wrote: > > We talked about creating a new "openssl" package that is whatever the > > most recent version is (in universe, and probably with no ESM-guarantee > > Would this hypothetical package be stri

Re: Choice of the openssl version for 23.10 and 24.04

2023-12-15 Thread Adrien Nader
Hi, On Mon, Dec 11, 2023, Robie Basak wrote: > On Mon, Dec 04, 2023 at 10:28:02AM +0100, Adrien Nader wrote: > > We talked about creating a new "openssl" package that is whatever the > > most recent version is (in universe, and probably with no ESM-guarantee > > attached somehow). This might need

Re: Choice of the openssl version for 23.10 and 24.04

2023-12-13 Thread Seth Arnold
On Mon, Dec 04, 2023 at 10:28:02AM +0100, Adrien Nader wrote: > We talked about creating a new "openssl" package that is whatever the > most recent version is (in universe, and probably with no ESM-guarantee Would this hypothetical package be strictly upstream OpenSSL, or would we make it match ou

Re: Choice of the openssl version for 23.10 and 24.04

2023-12-11 Thread Robie Basak
On Mon, Dec 04, 2023 at 10:28:02AM +0100, Adrien Nader wrote: > We talked about creating a new "openssl" package that is whatever the > most recent version is (in universe, and probably with no ESM-guarantee > attached somehow). This might need a bit of fiddling with packaging > though and in any c

Re: Choice of the openssl version for 23.10 and 24.04

2023-12-06 Thread Adrien Nader
On Mon, Dec 04, 2023, Dimitri John Ledkov wrote: > Hi, > > On Fri, 20 Oct 2023 at 15:35, Adrien Nader wrote: > > > > On Fri, Oct 20, 2023, Adrien Nader wrote: > > > Hi, > > > > > > A few weeks ago, openssl maintainers announced moving to a time-based > > > release (April and October): > > > > > >

Re: Choice of the openssl version for 23.10 and 24.04

2023-12-06 Thread Adrien Nader
On Mon, Dec 04, 2023, Dimitri John Ledkov wrote: > On Mon, 4 Dec 2023 at 12:34, Adrien Nader wrote: > > > > (stripping the quotes a bit) > > > > On Mon, Dec 04, 2023, Dimitri John Ledkov wrote: > > > On Mon, 4 Dec 2023 at 09:28, Adrien Nader wrote: > > > > The issue is that we do not know when wi

Re: Choice of the openssl version for 23.10 and 24.04

2023-12-06 Thread Adrien Nader
(stripping the quotes a bit) On Mon, Dec 04, 2023, Dimitri John Ledkov wrote: > On Mon, 4 Dec 2023 at 09:28, Adrien Nader wrote: > > The issue is that we do not know when will be the next openssl LTS. We > That's irrelevant. Once Ubuntu release goes stable, we no longer apply > full upstream poin

Re: Choice of the openssl version for 23.10 and 24.04

2023-12-06 Thread Adrien Nader
NB: re-sending with an e-mail adderss that isn't moderated; moderator: feel free to reject duplicate mails in the moderation queue (stripping the quotes a bit) On Mon, Dec 04, 2023, Dimitri John Ledkov wrote: > On Mon, 4 Dec 2023 at 09:28, Adrien Nader wrote: > > The issue is that we do not know

Re: Choice of the openssl version for 23.10 and 24.04

2023-12-06 Thread Adrien Nader
NB: re-sending with an e-mail adderss that isn't moderated; moderator: feel free to reject duplicate mails in the moderation queue On Mon, Dec 04, 2023, Dimitri John Ledkov wrote: > Hi, > > On Fri, 20 Oct 2023 at 15:35, Adrien Nader wrote: > > > > On Fri, Oct 20, 2023, Adrien Nader wrote: > > >

Re: Choice of the openssl version for 23.10 and 24.04

2023-12-06 Thread Adrien Nader
NB: attempting to re-send with a slightly different e-mail address that might make my mails pass list moderation automatically (no idea why I receive mails to a From: which isn't the one I'm subscribed with) On Mon, Dec 04, 2023, Dimitri John Ledkov wrote: > On Mon, 4 Dec 2023 at 12:34, Adrien Nad

Re: Choice of the openssl version for 23.10 and 24.04

2023-12-04 Thread Dimitri John Ledkov
On Mon, 4 Dec 2023 at 12:34, Adrien Nader wrote: > > (stripping the quotes a bit) > > On Mon, Dec 04, 2023, Dimitri John Ledkov wrote: > > On Mon, 4 Dec 2023 at 09:28, Adrien Nader wrote: > > > The issue is that we do not know when will be the next openssl LTS. We > > That's irrelevant. Once Ubun

Re: Choice of the openssl version for 23.10 and 24.04

2023-12-04 Thread Dimitri John Ledkov
On Mon, 4 Dec 2023 at 12:34, Adrien Nader wrote: > > (stripping the quotes a bit) > > On Mon, Dec 04, 2023, Dimitri John Ledkov wrote: > > On Mon, 4 Dec 2023 at 09:28, Adrien Nader wrote: > > > The issue is that we do not know when will be the next openssl LTS. We > > That's irrelevant. Once Ubun

Re: Choice of the openssl version for 23.10 and 24.04

2023-12-04 Thread Marc Deslauriers
On 2023-12-04 04:05, Dimitri John Ledkov wrote: Hi, On Fri, 20 Oct 2023 at 15:35, Adrien Nader wrote: On Fri, Oct 20, 2023, Adrien Nader wrote: Hi, A few weeks ago, openssl maintainers announced moving to a time-based release (April and October): https://www.openssl.org/blog/blog/2023/09/2

Re: Choice of the openssl version for 23.10 and 24.04

2023-12-04 Thread Dimitri John Ledkov
On Mon, 4 Dec 2023 at 09:28, Adrien Nader wrote: > > On Mon, Dec 04, 2023, Dimitri John Ledkov wrote: > > Hi, > > > > On Fri, 20 Oct 2023 at 15:35, Adrien Nader wrote: > > > > > > On Fri, Oct 20, 2023, Adrien Nader wrote: > > > > Hi, > > > > > > > > A few weeks ago, openssl maintainers announced

Re: Choice of the openssl version for 23.10 and 24.04

2023-12-04 Thread Dimitri John Ledkov
Hi, On Fri, 20 Oct 2023 at 15:35, Adrien Nader wrote: > > On Fri, Oct 20, 2023, Adrien Nader wrote: > > Hi, > > > > A few weeks ago, openssl maintainers announced moving to a time-based > > release (April and October): > > > > https://www.openssl.org/blog/blog/2023/09/29/OpenSSL-Update-ICMC23/ >

Re: Choice of the openssl version for 23.10 and 24.04

2023-10-22 Thread Adrien Nader
On Fri, Oct 20, 2023, Adrien Nader wrote: > Hi, > > A few weeks ago, openssl maintainers announced moving to a time-based > release (April and October): > > https://www.openssl.org/blog/blog/2023/09/29/OpenSSL-Update-ICMC23/ > > > Key takeaway 3 : Time Based Release Policy > > We’re transitionin

Re: Choice of the openssl version for 23.10 and 24.04

2023-10-22 Thread Adrien Nader
Hi, A few weeks ago, openssl maintainers announced moving to a time-based release (April and October): https://www.openssl.org/blog/blog/2023/09/29/OpenSSL-Update-ICMC23/ > Key takeaway 3 : Time Based Release Policy > We’re transitioning to time-based releases. This shift ensures > predictabilit

Re: Choice of the openssl version for 23.10 and 24.04

2023-06-02 Thread Adrien Nader
Hi, On Thu, May 18, 2023, Adrien Nader wrote: > On Wed, May 17, 2023, Dimitri John Ledkov wrote: > > We had similar dilemma around focal release. And I did SRU one off upgrade > > from 1.1.0 to 1.1.1. it was a minor disaster. (As in like the sad > > depressing songs in A minor scale). > > > > It

Re: Choice of the openssl version for 23.10 and 24.04

2023-05-25 Thread Adrien Nader
On Wed, May 17, 2023, Dimitri John Ledkov wrote: > We had similar dilemma around focal release. And I did SRU one off upgrade > from 1.1.0 to 1.1.1. it was a minor disaster. (As in like the sad > depressing songs in A minor scale). > > It is best to stick to one openssl version in a release. > >

Re: Choice of the openssl version for 23.10 and 24.04

2023-05-17 Thread Dimitri John Ledkov
We had similar dilemma around focal release. And I did SRU one off upgrade from 1.1.0 to 1.1.1. it was a minor disaster. (As in like the sad depressing songs in A minor scale). It is best to stick to one openssl version in a release. It is best to stick to longer supported one. It is best not to

Re: Choice of the openssl version for 23.10 and 24.04

2023-05-17 Thread Adrien Nader
On Tue, May 16, 2023, Marc Deslauriers wrote: > On 2023-05-15 05:18, Adrien Nader wrote: > > Hello, > > > > Ubuntu currently ships openssl 3.0. Debian will release with 3.0. > > > > Debian experimental contains 3.1. Openssl 3.1 has been out for a couple > > months. It seemed natural to switch to

Re: Choice of the openssl version for 23.10 and 24.04

2023-05-16 Thread Marc Deslauriers
On 2023-05-15 05:18, Adrien Nader wrote: Hello, Ubuntu currently ships openssl 3.0. Debian will release with 3.0. Debian experimental contains 3.1. Openssl 3.1 has been out for a couple months. It seemed natural to switch to 3.1 which contains a number of interesting changes including fixes for

Choice of the openssl version for 23.10 and 24.04

2023-05-16 Thread Adrien Nader
Hello, Ubuntu currently ships openssl 3.0. Debian will release with 3.0. Debian experimental contains 3.1. Openssl 3.1 has been out for a couple months. It seemed natural to switch to 3.1 which contains a number of interesting changes including fixes for performance regressions except that... Qu