Re: [exim-dev] [Bug 1895] Default groups for DH possibly bac…

Top Page
Delete this message
Reply to this message
Author: Viktor Dukhovni
Date:  
To: exim-dev
Subject: Re: [exim-dev] [Bug 1895] Default groups for DH possibly backdoored
On Tue, Mar 19, 2019 at 02:43:04AM +0000, admin--- via Exim-dev wrote:

> --- Comment #9 from Phil Pennock <pdp@???> ---
> IMO yes we're ready to drop support for older OpenSSL. We set a clear policy,
> it's over a year (or two?) after that point, and other projects have adopted
> similar policies.


FWIW, Postfix 3.4, released a few weeks ago no longer supports
OpenSSL versions prior to 1.0.2.

Though folks on this list probably don't care, Postfix support
covers and the current and 3 previous stable releases, so we're
still supporting Postfix 3.1, 3.2 and 3.3 which build with older
OpenSSL releases, all the way back to 0.9.7, but DANE support
requires at least OpenSSL 1.0.0. So users who're stuck with
OpenSSL 1.0.2 can continue to use it, with a slightly older
Postfix release, until 3.4 becomes the oldest supported stable
release.

-- 
    Viktor.