Skip to content

Upgrade OpenSSL to 1.1.1 #4267

@fcharlie

Description

@fcharlie

Good News OpenSSL 1.1.1 has been released, it supports TLS1.3 RFC 8446.
OpenSSl 1.1.1 is New LTS. OpenSSL 1.1.1 is API and ABI compliant with OpenSSL 1.1.0.

Support for various new cryptographic algorithms including:

  • SHA3
  • SHA512/224 and SHA512/256
  • EdDSA (including Ed25519 and Ed448)
  • X448 (adding to the existing X25519 support in 1.1.0)
  • Multi-prime RSA
  • SM2
  • SM3
  • SM4
  • SipHash
  • ARIA (including TLS support)

In fact, some ports cannot be upgraded to the latest version because the version of openssl of vcpkg is too low, such as libssh.

Our previous LTS release (OpenSSL 1.0.2) will continue to receive full support until the end of this year. After that it will receive security fixes only. It will stop receiving all support at the end of 2019. Users of that release are strongly advised to upgrade to OpenSSL 1.1.1.

It's time to upgrade OpenSSL.

See: https://www.openssl.org/blog/blog/2018/09/11/release111/

Here are the ports that depend on openssl:

ports support OpenSSL 1.1.1
librabbitmq
aws-sdk-cpp
wt
azure-c-shared-utility
libimobiledevice
yara
libwebsockets
podofo
thrift
ffmpeg
qpid-proton
folly
libssh ✔ (0.8.* Only 1.1.*) (2019-07 move to mbedTLS)
paho-mqtt
websocketpp
apr-util
libarchive
cppcms
libmysql
mongo-c-driver
fastrtps
freerdp
qt5-base ✔ (5.13)
caf
curl
opusfile
librtmp
libevent
mosquitto
uwebsoockets
libgit2
libpq ✔ (11.4 test OK, ubuntu 18.04 apt install openssl 1.1.1)
boost-asio
cpprestsdk
libtorrent
wangle
grpc
libssh2

Metadata

Metadata

Labels

category:port-updateThe issue is with a library, which is requesting update new revision

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions