freebsd security - Jan 2017 - Plan for OpenSSL in stable/10?

On Thu, Jan 12, 2017 at 10:57:20PM +0100, Dimitry Andric
wrote:
> On 12 Jan 2017, at 19:02, Eric van Gyzen <vangyzen at FreeBSD.org>
wrote:
> > 
> > Has anyone had time to discuss and form a plan for OpenSSL in
stable/10,
> > now that 1.0.1 is end-of-life?  I don't recall seeing any public
> > discussion or announcement; forgive me if I missed it.
> 
> Would updating to 1.0.2 change the API and/or ABI?
IIRC upstream claims that it is ABI and API compatible, but they were less
good about enforcing that rigorously back then than they are now, so maybe
some things slipped through the cracks.

-Ben

On 1/13/17, Benjamin Kaduk <kaduk at mit.edu>
wrote:
> On Thu, Jan 12, 2017 at 10:57:20PM +0100, Dimitry Andric wrote:
>> On 12 Jan 2017, at 19:02, Eric van Gyzen <vangyzen at
FreeBSD.org> wrote:
>> >
>> > Has anyone had time to discuss and form a plan for OpenSSL in
>> > stable/10,
>> > now that 1.0.1 is end-of-life?  I don't recall seeing any
public
>> > discussion or announcement; forgive me if I missed it.
>>
>> Would updating to 1.0.2 change the API and/or ABI?
>
> IIRC upstream claims that it is ABI and API compatible, but they were less
> good about enforcing that rigorously back then than they are now, so maybe
> some things slipped through the cracks.
>
Is there any news regards to these questions?
> -Ben
> _______________________________________________
> freebsd-security at freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-security
> To unsubscribe, send any mail to "freebsd-security-unsubscribe at
freebsd.org"
>