On Mon, Sep 05, 2016 at 11:17:03PM +0200, Sebastian Andrzej Siewior wrote:
> On 2016-06-28 16:40:09 [-0300], Antonio Terceiro wrote:
> > upstream already has support for OpenSSL 1.1.0 in trunk for Ruby 2.4;
> > see upstream bug linked above. given the current state of afairs, we
> > will need to either backport that for Ruby 2.3 ourselves, or disable the
> > openssl extension bundled with the interpreter and use a standalone
> > ruby-openssl package.
> 
> 2.4 is scheduled for 2016-12-25 so it is unlikely to be part of the next
> Debian release, right?

right. We'll release with 2.3

> Is the backport huge (in terms of conflicts of the original patch) or is
> it simpler to go for the ruby-openssl package?

the external ruby-openssl is probably not ok for Ruby 2.3. whether the
backport is viable is not clear yet. related:
https://github.com/ruby/openssl/issues/54

Do we have a timeline for OpenSSL 1.1?

Attachment: signature.asc
Description: PGP signature

Reply via email to