Conversation
zware
requested review from
AA-Turner,
corona10,
emmatyping and
erlend-aasland
as code owners
September 27, 2026 02:01
Documentation build overview
|
hugovk
approved these changes
Sep 27, 2026
| but the latest public release of the series has known vulnerabilities. | ||
| For best compatibility and security it is recommended to always use | ||
| the latest patch release of a current LTS release series (see the | ||
| `OpenSSL Roadmap <https://openssl-library.org/roadmap/index.html>`_), |
Member
There was a problem hiding this comment.
Prefer anon links:
Suggested change
| `OpenSSL Roadmap <https://openssl-library.org/roadmap/index.html>`_), | |
| `OpenSSL Roadmap <https://openssl-library.org/roadmap/index.html>`__), |
| :mod:`zlib` module. | ||
| .. [8] OpenSSL 1.1.1 is the minimum possible version to build against, | ||
| but the latest public release of the series has known vulnerabilities. | ||
| For best compatibility and security it is recommended to always use |
Member
There was a problem hiding this comment.
Suggested change
| For best compatibility and security it is recommended to always use | |
| For best compatibility and security it is recommended to use |
| * - `OpenSSL <https://openssl-library.org/>`_ | ||
| - | 3.0.18 recommended | ||
| | (1.1.1 minimum) | ||
| - [8]_ |
Member
There was a problem hiding this comment.
Suggested change
| - [8]_ | |
| - 1.1.1 [8]_ |
I think keeping the bare minimum here would be reasonable?
Comment on lines
+133
to
+140
| .. [8] OpenSSL 1.1.1 is the minimum possible version to build against, | ||
| but the latest public release of the series has known vulnerabilities. | ||
| For best compatibility and security it is recommended to always use | ||
| the latest patch release of a current LTS release series (see the | ||
| `OpenSSL Roadmap <https://openssl-library.org/roadmap/index.html>`_), | ||
| or the package provided by your operating system if available. Other | ||
| libraries that offer an API compatible with OpenSSL 1.1.1 or later may | ||
| also be usable, but are not officially supported. |
Member
There was a problem hiding this comment.
Suggested change
| .. [8] OpenSSL 1.1.1 is the minimum possible version to build against, | |
| but the latest public release of the series has known vulnerabilities. | |
| For best compatibility and security it is recommended to always use | |
| the latest patch release of a current LTS release series (see the | |
| `OpenSSL Roadmap <https://openssl-library.org/roadmap/index.html>`_), | |
| or the package provided by your operating system if available. Other | |
| libraries that offer an API compatible with OpenSSL 1.1.1 or later may | |
| also be usable, but are not officially supported. | |
| .. [8] OpenSSL 1.1.1 is the minimum possible version to build against, | |
| but that series is end-of-life and no longer receives | |
| security fixes. Use the latest patch release of a currently supported | |
| LTS series (see the `OpenSSL Roadmap | |
| <https://openssl-library.org/roadmap/index.html>`_), or the package | |
| provided by your operating system. Other libraries with an API | |
| compatible with OpenSSL 1.1.1 or later may work, but are not | |
| officially supported. |
Some little wording suggestions, feel free to reject as you see fit.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
To address @hugovk's comment on GH-158015, this adjusts the configure doc to avoid recommending a concrete version of OpenSSL at all, but instead point to what should be up-to-date resources and explain things a bit in prose.
This patch won't backport all the way to 3.13, but I plan to backport the idea manually after there's some agreement on the message.