From: Daniel Stenberg <daniel@haxx.se>
Date: Wed, 27 Aug 2025 06:01:17 +0000 (+0200)
Subject: DEPRECATE.md: drop old OpenSSL versions
X-Git-Tag: curl-8_16_0~67
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=c3bbd41eefd78f5dc51e96493434f031f7868477;p=thirdparty%2Fcurl.git

DEPRECATE.md: drop old OpenSSL versions

Closes #18413
---

diff --git a/docs/DEPRECATE.md b/docs/DEPRECATE.md
index bc4c0fc6ab..65c630cbee 100644
--- a/docs/DEPRECATE.md
+++ b/docs/DEPRECATE.md
@@ -48,6 +48,20 @@ Making the new minimum target Windows version Vista / Server 2008.
 
 In March 2026, we drop support for all c-ares versions before 1.16.0.
 
+## OpenSSL 1.0.2
+
+OpenSSL and others only ship fixes for this version to paying customers,
+meaning users of the free version risk being vulnerable.
+
+We remove support for this OpenSSL version from curl in December 2025.
+
+## OpenSSL 1.1.1
+
+OpenSSL and others only ship fixes to paying customers, meaning users of the
+free version risk being vulnerable.
+
+We remove support for this OpenSSL version from curl in June 2026.
+
 ## Past removals
 
  - axTLS (removed in 7.63.0)