-
Notifications
You must be signed in to change notification settings - Fork 134
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update OpenSSL Strategy for OpenSSL 3.x #859
Conversation
OpenSSL-Strategy.md
Outdated
* Default minimum TLS version is TLSv1.2, default maximum is TLSv1.3. TLSv1 | ||
and TLSv1.1 are *not* supported by default, only by explicit run-time | ||
configuration. | ||
* FIPS: not supported |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
or, maybe supported? it could happen.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Current expectation, as I understand it, is that the FIPS provider should be available by the end of the year
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Even if it comes for a later version in the 3.x as long as it's not breaking we should be able to get to FIPs as well. Therefore, it is more of a "maybe" at this point.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
lgtm, this look a lot of work.
not an appropriate choice for 16.x | ||
|
||
For minimal disruption, it would probably be helpful if Node.js supported | ||
building against OpenSSL 1.1.1 out-of-tree, even if OpenSSL 3.x was in-tree. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Agreed
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM with a comment.
No description provided.