OpenSSL 3+ Modernization

XMLWordPrintableJSON

    • Type: Task
    • Resolution: Unresolved
    • Priority: Major - P3
    • None
    • Affects Version/s: None
    • Component/s: None
    • None
    • Server Security
    • Server Security 2025-08-15
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      There exist several places on the server where we use deprecated OpenSSL APIs, be they initializers or otherwise. This ticket would "modernize" our OpenSSL implementation with OpenSSL 3.2+ as our standard moving forward, while still providing backwards compatibility with earlier OpenSSL versions, until we no longer support the server versions and platforms that require them.

      For example:

      1. Consider avoiding some of the deprecated function calls we are making in SetupOpenSSL (e.g., SSL_library_init()SSL_load_error_strings()ERR_load_crypto_strings(), and CRYPTO_set_locking_callback()) when linking against OpenSSL 3

            Assignee:
            Adam Rayner
            Reporter:
            Adam Rayner
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated: