[Info-vax] OpenSSL 3.0.1 and OpenSSH 8.8 (was: Re: SSL V3)

Stephen Hoffman seaohveh at hoffmanlabs.invalid
Wed Feb 16 11:31:26 EST 2022


On 2022-02-16 16:44:54 +0000, Mark Daniel said:

> On 16/2/22 2:26 pm, Dave Froble wrote:
>> Just got an email from VSI, their version of SSL V3 is now available.
> 
> Dave, would you mind posting the relevant section(s) of this advice.
> 
> I have been building OpenSSL 3.0.0 and 3.0.1 since release and 
> currently have an unresolved performance issue open
> 
> https://github.com/openssl/openssl/issues/16552
> 
> As VSI have released
> 
> VSI X86VMS SSL111 V1.1-1MA    Full LP   Install    Val 04-FEB-2022
> 
> only in the last couple of weeks, the announcement seems a little odd.

I'd expect to see both OpenSSL v1.1-1 / SSL111 / OpenSSL 1.1.1 and 
OpenSSL v3.0-1 / SSL3 / OpenSSL 3.0.1 released in parallel for a while 
and each with occasional updates, to give folks the opportunity to 
migrate apps to OpenSSL v3.0-1 / SSL3 / OpenSSL 3.0.1.

The OpenSSL v3.0-1 release notes make it very clear that this is to be 
a rolling migration, and that "under no circumstances should [OpenSSL 
1.1.1] be removed". That advice will undoubtedly change as VSI and 
third-parties and end-users all complete the migration.

The newly-announced OpenSSH 8.8 kit is currently available (only) for 
OpenVMS x86-64 V9.1A and later.


-- 
Pure Personal Opinion | HoffmanLabs LLC 




More information about the Info-vax mailing list