Re: OpenSSL 1.1.0
On Mon, Nov 14, 2016 at 03:37:00PM +0100, Adam Borowski wrote:
> Another issue: 1.0.2 is a LTS, supported until 2019-12-31, while 1.1.0 a
> short-lived release with upstream support only until 2018-08-31.
Hmm... a different interpretation of these two data points:
Stretch's EOL is projected for May 2022 (LTS), and even regular support will
exceed the EOL of either of the above openssl branches. It'll be a lot
easier to backport fixes from 1.1.1+ to 1.1.0 than 1.0.2, and security
issues that don't apply to the 1.1 branch won't be even reported.
This gains us anything only for the "1.1.0 only" variant, though, which
doesn't sound possible.
--
A true bird-watcher waves his tail while doing so.
Reply to: