From nobody Mon Mar 17 01:34:33 2025 X-Original-To: freebsd-current@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4ZGHZv1CMcz5kjWM for ; Mon, 17 Mar 2025 01:34:47 +0000 (UTC) (envelope-from yaneurabeya@gmail.com) Received: from mail-pl1-x629.google.com (mail-pl1-x629.google.com [IPv6:2607:f8b0:4864:20::629]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "WR4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4ZGHZs5XrYz3DbF for ; Mon, 17 Mar 2025 01:34:45 +0000 (UTC) (envelope-from yaneurabeya@gmail.com) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20230601 header.b=MHu5Adeu; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of yaneurabeya@gmail.com designates 2607:f8b0:4864:20::629 as permitted sender) smtp.mailfrom=yaneurabeya@gmail.com Received: by mail-pl1-x629.google.com with SMTP id d9443c01a7336-224191d92e4so71215645ad.3 for ; Sun, 16 Mar 2025 18:34:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1742175284; x=1742780084; darn=freebsd.org; h=to:references:message-id:content-transfer-encoding:cc:date :in-reply-to:from:subject:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=0laKEm0GWZpkDx7vII5e0rXx1jJImvYEXj9GeOOB81o=; b=MHu5AdeuZmF/zH9PN2fUX4iIMUoTGDN4maidMxoXeeq4bc6p/JyvfhlNUr7DVbcGu6 LkDpIy+7ZfhmlIkoNy5KDP5L6nOUsEa0t4YDLDC2okNEHEknru/B65O8biQQh4Ljzbrf nDe+7cDx2TO+erBuuPpsAoXwXhNwqlCgmzp8kw0rQQYj4KgWpUQArX9DlkTF7f29kqPJ 8GCN3AOwgcmAO1RRhjDMWSISqlt/BfnoY+qZi1NAXLf4js7K3wqJ+saOY0jVslvgQ+Om Np53XWjPmfZHlR2vKjOgVYYAwO2+ZQa585jF9iUKGmUsI8oM40p3fOmY9iGHf1JwpLR+ gX1Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1742175284; x=1742780084; h=to:references:message-id:content-transfer-encoding:cc:date :in-reply-to:from:subject:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=0laKEm0GWZpkDx7vII5e0rXx1jJImvYEXj9GeOOB81o=; b=PmudqJVoSoHDCDwx4a9QzRNbAQixyofUgdMT7VsQp6cHWNkPHnlyOMY9ZOrMmYorVX yX91w6OY/YhNv+95xdJ72FW08oKn9vQBv+rfOhYvmtF96p5Q52k8VWmC5899At/yNiLx 2Yxxn8JDqgLrFiQmUSRLm3NFJxJwehP5zyehRYYTTK/0UrMMWbYZ4s0Lg29gEgLy52oO d8jCwtcTMFQiH0t5vJMicvShohkCo/1l7AQklbNCctpRXkkq+63W3B3/Xc9UOVII0zac U0sgFIYmKcrgQqdqXV22d8PciZ/RHJ6fqtqzfhyZgaiRVjnOx5usGa1QW52Mrr1a0lmj jLCQ== X-Gm-Message-State: AOJu0YxGKT79dtx4DmzvAD7zbu+J9kQbj6YzYV7cPSoajZcl4tO656Ct jYxCfHR8LQC2TOVolZfBND4sNMwFXnFv7X6/w1GjnTnxcO+HMkjYU+NhPeJ1eeA= X-Gm-Gg: ASbGnctTATZraxMwKZFyis5rXxtqazjcYC93GRFMoQbAj4+HjYRkgFIwd7cUyZGtgzd 5H8apwsSq8xku2MI3YCiQgDErcew3t3vEMegCC+yc9mm7AbdWTYFOvRKVIRzzgDSAkxu//VbAcW QKrx6SC49eV2rDHDcN2QBJ1VPlqEbUlkQr+CPChsTCP6FiS33nvkMzoSoHCVDH8H5iOWPLtqp1v dXaloYfcNA8Oh4kScY5UxW+EkyyfJdgyn+VHlbOu5PHexvY3XT6xnps1qIiO1c/CObLPs4zpjPq PJxOt87quEfhypesWEl+x30j9DMEZRiYHDsG+pGpMFmvl7n6PxSZUtY/xpM57jkC9iSlUGJpfei tRiaz X-Google-Smtp-Source: AGHT+IEuzXBdm1kaqrBoItAFFezlFT5POsVsQf2Sof4mJJJ2zJ2N3O7onA4Ni+M+x8X668yXljew9w== X-Received: by 2002:a17:903:2f86:b0:224:93e:b5d7 with SMTP id d9443c01a7336-225e0afa057mr152432385ad.34.1742175284183; Sun, 16 Mar 2025 18:34:44 -0700 (PDT) Received: from smtpclient.apple ([94.156.149.176]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-225c68a404bsm63686505ad.54.2025.03.16.18.34.43 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Sun, 16 Mar 2025 18:34:43 -0700 (PDT) Content-Type: text/plain; charset=utf-8 List-Id: Discussions about the use of FreeBSD-current List-Archive: https://lists.freebsd.org/archives/freebsd-current List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-current@FreeBSD.org Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3826.400.131.1.6\)) Subject: Re: Expected OpenSSL versions in 14-stable and 15-current From: "Enji Cooper (yaneurabeya)" In-Reply-To: Date: Sun, 16 Mar 2025 18:34:33 -0700 Cc: FreeBSD CURRENT Content-Transfer-Encoding: quoted-printable Message-Id: <381937C3-47E7-4686-A47A-69A1A1B0F50B@gmail.com> References: To: Minsoo Choo X-Mailer: Apple Mail (2.3826.400.131.1.6) X-Spamd-Result: default: False [1.49 / 15.00]; NEURAL_SPAM_MEDIUM(0.99)[0.991]; NEURAL_SPAM_LONG(0.82)[0.817]; MV_CASE(0.50)[]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20230601]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36]; NEURAL_SPAM_SHORT(0.18)[0.185]; MIME_GOOD(-0.10)[text/plain]; RCPT_COUNT_TWO(0.00)[2]; PREVIOUSLY_DELIVERED(0.00)[freebsd-current@freebsd.org]; ARC_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; FREEMAIL_FROM(0.00)[gmail.com]; RCVD_TLS_LAST(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim]; FREEMAIL_ENVFROM(0.00)[gmail.com]; TO_DN_ALL(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[2607:f8b0:4864:20::629:from]; MLMMJ_DEST(0.00)[freebsd-current@freebsd.org]; RCVD_COUNT_TWO(0.00)[2]; TO_MATCH_ENVRCPT_SOME(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; RCVD_VIA_SMTP_AUTH(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; FROM_HAS_DN(0.00)[] X-Rspamd-Queue-Id: 4ZGHZs5XrYz3DbF X-Spamd-Bar: + > On Mar 12, 2025, at 4:19=E2=80=AFPM, Minsoo Choo = wrote: >=20 > OpenSSL 3.5 LTS alpha has been just released [1]. The expected EOL = date of OpenSSL 3.0 LTS is September 7th 2026 [2]. FreeBSD 15 is = expected to be release in December 2025, and FreeBSD 14.5 is expected to = be released in September 2026. 14-stable will be see its EOL on November = 30th, 2028 [3]. >=20 > Will FreeBSD 15 contain OpenSSL 3.5 LTS in this December? And for = 14-stable, will it have upgrade to OpenSSL 3.5 LTS before FreeBSD 14.5 = or just maintain 3.0 LTS with our own bug/security fixes until = 14-stable's end-of-life date? >=20 > [1] = https://github.com/openssl/openssl/releases/tag/openssl-3.5.0-alpha1 > [2] https://en.wikipedia.org/wiki/OpenSSL#Major_version_releases > [3] https://www.freebsd.org/security/#sup Hi Minsoo, It makes sense to upgrade to 3.5 on CURRENT, but I don=E2=80=99t = think we can do that on STABLE branches because of ABI/KBI compatibility = guarantees. Cheers, -Enji=