Re: OpenSSL 3.0.x

[Thomas Klausner <wiz%NetBSD.org@localhost>]

On Thu, Mar 30, 2023 at 07:34:00PM +0100, Jonathan Perkin wrote:
> I've tested an update to security/openssl in a bulk build, given 1.1.1 is
> quickly approaching EOL.
> 
> It looks a lot better than when I tried this a year or so ago:
> 
>   https://us-central.manta.mnx.io/pkgsrc/public/reports/upstream-bulktest/20230329.1602/meta/report.html

That looks really good!

Comparing the top fallout I see poco and freeradius (both have major
new versions out, so there should be upstream fixes available in case
anyone is interested).

> An outstanding question I have is what we do with BUILDLINK_API_DEPENDS.  If
> I bump it to 3.0.8 is that going to annoy folks on NetBSD, or have you
> already migrated from 1.1.1 there?

I heared there's a project to get -current to openssl 3, but right now
it's still at 1.1.1something. But I don't think the upcoming NetBSD 10
will get openssl 3.
 Thomas