Re: Newer OpenSSL (3.5+) on 14-STABLE?

From: Ronald Klop <ronald-lists_at_klop.ws>
Date: Tue, 09 Dec 2025 11:49:26 UTC
 
Van: Michael Osipov <michaelo@FreeBSD.org>
Datum: dinsdag, 9 december 2025 10:50
Aan: freebsd-stable@FreeBSD.org
Onderwerp: Newer OpenSSL (3.5+) on 14-STABLE?
> 
> Hi folks,
> 
> since OpenSSL 3.0 will go EOL in 2026-09, but 14-STABLE will live more than two years after that is there any planning to upgrade to OpenSSL 3.5 in 14.4 or later?
> 
> The question popped up since upstream projects are now starting to remove OpenSSL < 3.0.0 support and 13.x will be cutoff with OpenSSL from base.
> 
> Examples:
> * https://cryptography.io/en/latest/changelog/#main
> *
> https://github.com/curl/curl/commit/69c89bf3d3137fcbb2b8bc57233182adcf1e2817
> 
> Michael
> 
> PS: I am not planning to use OpenSSl from ports for various reasons
>  
> 
> 
> 


According to the release strategy of OpenSSL, version 3.5 should be API/ABI compatible as only the minor version increases.

https://openssl-library.org/policies/releasestrat/index.html

In the end it I think it would be best to ask the people who did the heavy lifting of the import if porting to 14 is feasible or not.
https://cgit.freebsd.org/src/log/crypto/openssl

Regards,
Ronald.