[tpm2] Re: Dropping Openssl < 1.1 support

[tpm2] Re: Dropping Openssl < 1.1 support

[Emmanuel Deloget]

[-- Attachment #1: Type: text/plain, Size: 1165 bytes --]

Hello William,

This is something we discussed on the OpenVPN list for the same reason.
While OpenSSL 1.0 is EoL'ed, it's still supported on RHEL7 for a few month
(according to https://access.redhat.com/support/policy/updates/errata and
https://access.redhat.com/articles/1462343). If you want your users to be
able to compile/install the TPM2 stack on RHEL7 you will need to support
OpenSSL 1.0 until November 2020.

Of course, it's your call. You may also say "those who want to use OpenSSL
1.0 shall stick to branch XXXX".

Best regards,

-- Emmanuel Deloget

On Thu, Jan 2, 2020 at 6:39 PM Roberts, William C <
william.c.roberts(a)intel.com> wrote:

> Now that the new year is upon us, we should consider dropping OSSL < 1.1
> support since it's no longer supported. I'm proposing on everyone's
> mainline, we drop
> That support and the next major feature bump release contains this change.
> Any objections?
>
> Bill
> _______________________________________________
> tpm2 mailing list -- tpm2(a)lists.01.org
> To unsubscribe send an email to tpm2-leave(a)lists.01.org
> %(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s
>

[-- Attachment #2: attachment.htm --]
[-- Type: text/html, Size: 2473 bytes --]

[tpm2] Re: Dropping Openssl < 1.1 support

[Roberts, William C]

[-- Attachment #1: Type: text/plain, Size: 1604 bytes --]



> -----Original Message-----
> From: Fuchs, Andreas [mailto:andreas.fuchs(a)sit.fraunhofer.de]
> Sent: Friday, January 3, 2020 3:38 AM
> To: Roberts, William C <william.c.roberts(a)intel.com>; tpm2(a)lists.01.org
> Subject: RE: Dropping Openssl < 1.1 support
> 
> Also, Debian Jessie comes with OpenSSL 1.0.x until 2020-06 and Ubuntu 16.04
> until 2021-06.
> End of Life for Ubuntu 16.04 is 2024, but I think End of Support would be early
> eanough.

2024 is for paying customers and is security fixes only. I wonder if they are going to maintain OSSL 1.0.2
Patches on top of the last release to support this, or If they have a 1.1 upgrade plan.

> 
> As much as I like kicking OSSL < 1.1, IMHO Ubuntu 16.04 is the big obstacle, since
> it's used Quite a lot.

This is what my concern was, was older, slower to update, LTS distros. 

> 
> my 2 cents,
> Andreas
> 
> ________________________________________
> From: Roberts, William C [william.c.roberts(a)intel.com]
> Sent: Thursday, January 02, 2020 18:39
> To: tpm2(a)lists.01.org
> Subject: [tpm2] Dropping Openssl < 1.1 support
> 
> Now that the new year is upon us, we should consider dropping OSSL < 1.1
> support since it's no longer supported. I'm proposing on everyone's mainline, we
> drop That support and the next major feature bump release contains this change.
> Any objections?
> 
> Bill
> _______________________________________________
> tpm2 mailing list -- tpm2(a)lists.01.org
> To unsubscribe send an email to tpm2-leave(a)lists.01.org
> %(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s

[tpm2] Re: Dropping Openssl < 1.1 support

[Fuchs, Andreas]

[-- Attachment #1: Type: text/plain, Size: 997 bytes --]

Also, Debian Jessie comes with OpenSSL 1.0.x until 2020-06 and Ubuntu 16.04 until 2021-06.
End of Life for Ubuntu 16.04 is 2024, but I think End of Support would be early eanough.

As much as I like kicking OSSL < 1.1, IMHO Ubuntu 16.04 is the big obstacle, since it's used Quite a lot.

my 2 cents,
Andreas

________________________________________
From: Roberts, William C [william.c.roberts(a)intel.com]
Sent: Thursday, January 02, 2020 18:39
To: tpm2(a)lists.01.org
Subject: [tpm2] Dropping Openssl < 1.1 support

Now that the new year is upon us, we should consider dropping OSSL < 1.1 support since it's no longer supported. I'm proposing on everyone's mainline, we drop
That support and the next major feature bump release contains this change. Any objections?

Bill
_______________________________________________
tpm2 mailing list -- tpm2(a)lists.01.org
To unsubscribe send an email to tpm2-leave(a)lists.01.org
%(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s