OPenssl 1.1 and Bind

[Mark Andrews]

In message <np4ipv$18t6$12 at gallifrey.nk.ca>, The Doctor writes:
> Vin?cius Ferr?o <ferrao at if.ufrj.br> wrote:
> : OpenSSL 1.0 will continue to be supported. There's no rush to go to 1.1 rel
> ease.
> 
> : I can't see this as an issue.
> 
> Tell us that when openssl 1.0 starts to disappear.

It was mostly accessor functions were missing which I wasn't worried
about as I expected them to turn up which they have.  You then have
to recode everything to deal with all the structures being opaque.

There is also the issue of making a code base that will compile w/
OpenSSL 1.1 and OpenSSL 1.0 (and 0.9 despite it being EOL).  I
suspect we will have static versions of the OpenSSL 1.1 accessor
functions so we can build w/ OpenSSL 1.0 and not have too many
#if/#else/#endif.  Aim to have all the code be written for OpenSSL 1.1.

Need to figure out how GOST is now done.

PKCS11 will most probably not be via OpenSSL anymore.

Then there is the gssapi support libraries that also need to support
OpenSSL 1.1.

Mark

> : Sent from my iPhone
> 
> : > On Aug 17, 2016, at 23:38, The Doctor <doctor at doctor.nl2k.ab.ca> wrote:
> : > 
> : >> On Thu, Aug 18, 2016 at 12:13:29PM +1000, Mark Andrews wrote:
> : >> 
> : >> In message <np1rek$4eu$27 at gallifrey.nk.ca>, The Doctor writes:
> : >>> Question, Is Bind openssl 1.1 ready?
> : >> 
> : >> No.  OpenSSL 1.1 breaks the build.  They take things away with no
> : >> viable alternatives as of last - 1 snapshot.
> : > 
> : > Openssl is aiming for a 26 Aug 2016 release.
> : > 
> : > What then?
> : > 
> : >> Mark
> : >> -- 
> : >> Mark Andrews, ISC
> : >> 1 Seymour St., Dundas Valley, NSW 2117, Australia
> : >> PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org
> : > 
> : > -- 
> : > Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@nl2
> k.ab.ca
> : > God,Queen and country!Never Satan President Republic!Beware AntiChrist ri
> sing! 
> : > http://www.fullyfollow.me/rootnl2k  Look at Psalms 14 and 53 on Atheism
> : > Time for the USA to hold a referendum on its republic and vote to dissolv
> e!! 
> : > _______________________________________________
> : > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubsc
> ribe from this list
> : > 
> : > bind-users mailing list
> : > bind-users at lists.isc.org
> : > https://lists.isc.org/mailman/listinfo/bind-users
> 
> -- 
> Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@nl2k.ab
> .ca
> God,Queen and country!Never Satan President Republic!Beware AntiChrist rising
> ! 
> http://www.fullyfollow.me/rootnl2k  Look at Psalms 14 and 53 on Atheism
> Time for the USA to hold a referendum on its republic and vote to dissolve!! 
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
>  from this list
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org