Stop supporting old versions of OpenSSL?

See OpenSSL Release Strategy:

  • Version 3.0 will be supported until 2026-09-07 (LTS).
  • Version 1.1.1 will be supported until 2023-09-11 (LTS).
  • Version 1.0.2 is no longer supported. Extended support for 1.0.2 to gain access to security fixes for that version is available.
  • Versions 1.1.0, 1.0.1, 1.0.0 and 0.9.8 are no longer supported.

Therefore, we only need to support OpenSSL >= 1.0.2. CentOS 6 ships OpenSSL 1.0.1, but since we do not support CentOS 6 any more, this is not an issue.

I am not sure where this leaves us with LibreSSL. Is LibreSSL still stuck with the pre-1.0.1 API?

Edited by Dimitri Papadopoulos Orfanos