> On 28 Jun 2016, at 11:03 PM, Mark Donnelly <[log in to unmask]> wrote:
>
> On 6/27/2016 1:13 PM, Sam Hartman wrote:
>> Debian (and Ubuntu on a similar but not identical schedule) will move
>> from the existing openssl to the new openssl.
>> At that point software needs to be built against the new openssl;
>> software that cannot do that will be dropped.
>
> Is this schedule one that is best measured in days, best measured in
> weeks, or best measured in months? Knowing that would help us to figure
> out when to put in this work, relative to other ongoing work.
When I looked at porting Heimdal to the new OpenSSL, the only significant changes were in using the new (opaque) hash interfaces, so it should be measured in days if not hours. If we are resyncing with wpa_supplicant it would be a good thing to do concurrent with upstreaming the SChannel changes from the SSP.
— Luke
|