Re: OpenSSL 3.0.x

[David Brownlee <abs%absd.org@localhost>]

On Thu, 30 Mar 2023 at 20:33, Thomas Klausner <wiz%netbsd.org@localhost> wrote:
>
> On Thu, Mar 30, 2023 at 07:34:00PM +0100, Jonathan Perkin wrote:
> > I've tested an update to security/openssl in a bulk build, given 1.1.1 is
> > quickly approaching EOL.
> >
> > It looks a lot better than when I tried this a year or so ago:
> >
> >   https://us-central.manta.mnx.io/pkgsrc/public/reports/upstream-bulktest/20230329.1602/meta/report.html
>
> That looks really good!
>
> Comparing the top fallout I see poco and freeradius (both have major
> new versions out, so there should be upstream fixes available in case
> anyone is interested).
>
> > An outstanding question I have is what we do with BUILDLINK_API_DEPENDS.  If
> > I bump it to 3.0.8 is that going to annoy folks on NetBSD, or have you
> > already migrated from 1.1.1 there?
>
> I heared there's a project to get -current to openssl 3, but right now
> it's still at 1.1.1something. But I don't think the upcoming NetBSD 10
> will get openssl 3.

Given the impending 1.1.1 EOL, if -current can get to openssl 3 it may
be worth a push to try to get it into netbsd-10... if time permits.

David