Re: openssl 3

[Martin Husemann <martin%duskware.de@localhost>]

On Thu, Sep 30, 2021 at 09:18:23AM -0400, Greg Troxel wrote:
> The real question is what kind of pace of update is best, as maintained
> upstreams are going to make releases that work with openssl3, and not
> being first makes life easier.
> 
> I suspect in a few weeks we'll have a better idea.

I am trying hard to make a branch for netbsd-10 actually possible in
the very near future. We have only few remaining hard blockers.

> > We can't do that. Instead, at some point (probably a bit past the two
> > years 1.1 will still receive updates) we will have to bite and switch
> > netbsd-9 over to pkgsrc based openssl.
> 
> I don't know what you mean exactly.   Certainly at some point pkgsrc
> builds on 9 will use pkgsrc openssl.  Perhaps long before that.   But I
> don't see how e.g. postfix in base is going to use pkgsrc openssl.

Right, so the admin of an affected machine would have to choose:

 - update to newer netbsd
 - update to use pkgsrc postfix
 - live with outdated openssl

Martin