--On Friday, March 17, 2023 3:54 AM +0000 Soichiro Shishido
<shishidosoichiro(a)gmail.com> wrote:
Are there plans to support OpenSSL 3.0.x in OpenLDAP v2.5?
OpenSSL 1.1.1 will be discontinued this year on 2023-09-11. Also,
according to the OpenLDAP Project Release Maintenance Policy, it appears
that v2.6 will not be LTS for some time yet.
If OpenSSL 1.1.1 vulnerabilities are reported after 2023-09-12, and if we
do not migrate to OpenSSL 3.0.x, OpenLDAP v2.5 will be left vulnerable.
Hi, thanks for the note. This has been added as an item for the 2.5.15
release. (<
https://bugs.openldap.org/show_bug.cgi?id=10030>)
Regards,
Quanah