From cd50e7673f7faba724a346fef3ba646b1b22ad66 Mon Sep 17 00:00:00 2001 From: Willy Tarreau Date: Tue, 31 May 2022 11:37:37 +0200 Subject: [PATCH] DOC: install: update supported OpenSSL versions in the INSTALL doc OpenSSL 3.0 is now supported but was not mentioned. Also, it was found that OpenSSL 0.9.8 doesn't build anymore since 2.5 due to some of the functions used in the JWT token processing, and since nobody complained, it seems it's not worth fixing it so support for it was removed. --- INSTALL | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/INSTALL b/INSTALL index 55033cbfc..502f7ab19 100644 --- a/INSTALL +++ b/INSTALL @@ -225,7 +225,7 @@ to forcefully enable it using "USE_LIBCRYPT=1". ----------------- For SSL/TLS, it is necessary to use a cryptography library. HAProxy currently supports the OpenSSL library, and is known to build and work with branches -0.9.8, 1.0.0, 1.0.1, 1.0.2, 1.1.0 and 1.1.1. OpenSSL follows a long-term +1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1, and 3.0.x. OpenSSL follows a long-term support cycle similar to HAProxy's, and each of the branches above receives its own fixes, without forcing you to upgrade to another branch. There is no excuse for staying vulnerable by not applying a fix available for your version. There