From: Willy Tarreau Date: Thu, 23 Nov 2023 15:29:42 +0000 (+0100) Subject: DOC: install: update the list of openssl versions X-Git-Tag: v2.9-dev11~12 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=0fccee6abe87a050c0f01f62434cf7ff915c88ac;p=thirdparty%2Fhaproxy.git DOC: install: update the list of openssl versions 3.2-final still builds without warnings and works at first glance, so let's update the list of versions in the INSTALL file. --- diff --git a/INSTALL b/INSTALL index e1053e3c3f..591b4214e5 100644 --- a/INSTALL +++ b/INSTALL @@ -227,10 +227,10 @@ to forcefully enable it using "USE_LIBCRYPT=1". ----------------- For SSL/TLS, it is necessary to use a cryptography library. HAProxy currently supports the OpenSSL library, and is known to build and work with branches -1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1, 3.0 and 3.1. It is recommended to use at -least OpenSSL 1.1.1 to have support for all SSL keywords and configuration in -HAProxy. OpenSSL follows a long-term support cycle similar to HAProxy's, and -each of the branches above receives its own fixes, without forcing you to +1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1, 3.0, 3.1 and 3.2. It is recommended to use +at least OpenSSL 1.1.1 to have support for all SSL keywords and configuration +in HAProxy. OpenSSL follows a long-term support cycle similar to HAProxy's, +and each of the branches above receives its own fixes, without forcing you to upgrade to another branch. There is no excuse for staying vulnerable by not applying a fix available for your version. There is always a small risk of regression when jumping from one branch to another one, especially when it's