Use OpenSSL 3.0 - Githubissues

docker-library / rabbitmq

Docker Official Image packaging for RabbitMQ

http://www.rabbitmq.com/

MIT License

785 stars 417 forks source link

Use OpenSSL 3.0 #602

Closed lukebakken closed 1 year ago

lukebakken commented 1 year ago

This also builds OpenSSL 3.0's FIPS provider but disables it since Erlang does not yet support it.

Tangentially related to the following:

yosifkit commented 1 year ago

Should we move 3.9 back to openssl 1.1 or is it fine that the final release of 3.9.x changes to openssl 3.0?

lukebakken commented 1 year ago

Since everything is using Erlang 25.2.2 I think using OpenSSL 3.0 for all RabbitMQ releases is fine at this time - https://www.erlang.org/doc/apps/crypto/notes.html

Crypto is now considered to be usable with the OpenSSL 3.0 cryptolib for production code

michaelklishin commented 1 year ago

@yosifkit 3.9 has reached the end of community support, since the 3.9.28 tag is up on Docker Hub already, we can probably retire the 3.9 version of this image in this repo, now or in a couple of months.