Are there plans to support OpenSSL 3.0.x in OpenLDAP v2.5?
OpenSSL 1.1.1 will be discontinued this year on 2023-09-11. Also, according to the OpenLDAP Project Release Maintenance Policy, it appears that v2.6 will not be LTS for some time yet.
If OpenSSL 1.1.1 vulnerabilities are reported after 2023-09-12, and if we do not migrate to OpenSSL 3.0.x, OpenLDAP v2.5 will be left vulnerable.
--On Friday, March 17, 2023 3:54 AM +0000 Soichiro Shishido shishidosoichiro@gmail.com wrote:
Are there plans to support OpenSSL 3.0.x in OpenLDAP v2.5?
OpenSSL 1.1.1 will be discontinued this year on 2023-09-11. Also, according to the OpenLDAP Project Release Maintenance Policy, it appears that v2.6 will not be LTS for some time yet.
If OpenSSL 1.1.1 vulnerabilities are reported after 2023-09-12, and if we do not migrate to OpenSSL 3.0.x, OpenLDAP v2.5 will be left vulnerable.
Hi, thanks for the note. This has been added as an item for the 2.5.15 release. (https://bugs.openldap.org/show_bug.cgi?id=10030)
Regards, Quanah
Dear Quanah,
Thanks for addressing my concern. Your quick response and efforts are appreciated.
Best regards,
Shishido
openldap-technical@openldap.org
-
Quanah Gibson-Mount -
Soichiro Shishido