Re: Query regarding upgrading TLS compatibility

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Awesome, I sit corrected in this case. :)

In any case, though, it's generally best to plan to recompile.  (Who says that TLS 1.4 will be able to be implemented in a binary compatible manner?)  And even with this news, it is certainly a requirement that the original poster must plan to replace the dynamic library used by his application on the devices it is deployed on.

-Kyle H

On Mon, Apr 3, 2017 at 6:22 PM, Viktor Dukhovni <openssl-users@xxxxxxxxxxxx> wrote:

> On Apr 3, 2017, at 8:42 PM, Kyle Hamilton <aerowolf@xxxxxxxxx> wrote:
>
>
> In other words, it is very unlikely that TLS 1.3 can be implemented
> in a binary-compatible manner.  It is best if you plan to recompile
> your application against the version of the library that implements
> TLS 1.3.

Unlikely or not, the OpenSSL 1.1.1 release will be binary compatible
with 1.1.0 and will support TLS 1.3.  There will be new features, but
for most appliations, the software and protocol upgrade is transparent.


--
        Viktor.

--
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]

  Powered by Linux