Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Doc updates for OpenSSL v3 support #924

Closed
doveye opened this issue Apr 20, 2022 · 3 comments
Closed

Doc updates for OpenSSL v3 support #924

doveye opened this issue Apr 20, 2022 · 3 comments

Comments

@doveye
Copy link
Contributor

doveye commented Apr 20, 2022

Issue or pull request number:
eclipse-openj9/openj9#13686

Overview:
OpenSSL v3 support is being added for Linux only (at this time). Some newer operating systems (Ubuntu 22.04, RHEL 9) will come with this version rather than 1.1. Users of those operating systems won't be able to get 1.1 easily either.

OpenSSL v3 is tried first, followed by the previous order for 1.1.1, 1.0, etc

Release target:
Eclipse OpenJ9 0.32.0

Applies to the following JDK versions:
All versions

Applies to the following platforms:
Only Linux platforms are enabled to load openssl v3 in the 0.32 release.

@doveye
Copy link
Contributor Author

doveye commented Apr 20, 2022

This will require doc updates too, to say we're supporting OpenSSL 3.0 but also some topics mention OpenSSL versions, eg:

Might also require other updates beyond just updating the version, eg ibmruntimes/openj9-openjdk-jdk11#499 (comment).

@pshipton
Copy link
Member

I've updated the description with: Only Linux platforms are enabled to load openssl v3 in the 0.32 release.

@pshipton
Copy link
Member

pshipton commented Apr 20, 2022

Re ibmruntimes/openj9-openjdk-jdk11#499 (comment) the relevant option to disable openssl GCM support is https://www.eclipse.org/openj9/docs/djdknativegcm/

Sreekala-Gopakumar added a commit to Sreekala-Gopakumar/openj9-docs that referenced this issue Apr 26, 2022
eclipse-openj9#924

Added support for Open SSL 3.0.x (Linux only)
Updated content to mention that OpenSSL 3.0.x is supported for the same algorithms as 1.1.x.
Updated that in case of multiple versions of OpenSSL on the system, the OpenJ9 VM uses the latest version.
Added a note that that OpenSSL 3.0.x does not support initialization vector (IV) sizes above 16Bytes for the GCM algorithm.

[skip ci]

Signed-off-by: Sreekala Gopakumar [email protected]
Sreekala-Gopakumar added a commit to Sreekala-Gopakumar/openj9-docs that referenced this issue Apr 27, 2022
eclipse-openj9#924

Added support for Open SSL 3.0.x (Linux only)
Updated content to mention that OpenSSL 3.0.x is supported for the same algorithms as 1.1.x.
Updated that in case of multiple versions of OpenSSL on the system, the OpenJ9 VM uses the latest version.
Added a note that that OpenSSL 3.0.x does not support initialization vector (IV) sizes above 16Bytes for the GCM algorithm.

[skip ci]

Signed-off-by: Sreekala Gopakumar [email protected]
@doveye doveye closed this as completed Apr 27, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants