-
Type:
Task
-
Resolution: Unresolved
-
Priority:
Major - P3
-
None
-
Affects Version/s: None
-
Component/s: None
-
None
-
Server Security
-
Server Security 2025-08-15
-
None
-
None
-
None
-
None
-
None
-
None
-
None
There exist several places on the server where we use deprecated OpenSSL APIs, be they initializers or otherwise. This ticket would "modernize" our OpenSSL implementation with OpenSSL 3.2+ as our standard moving forward, while still providing backwards compatibility with earlier OpenSSL versions, until we no longer support the server versions and platforms that require them.
For example:
- Consider avoiding some of the deprecated function calls we are making in SetupOpenSSL (e.g., SSL_library_init(), SSL_load_error_strings(), ERR_load_crypto_strings(), and CRYPTO_set_locking_callback()) when linking against OpenSSL 3