OpenSSL 3.0.1 is here...

Use this forum if you want to suggest a new feature to hMailServer. Before posting, please search the forum to confirm that it has not already been suggested.
Post Reply
User avatar
SorenR
Senior user
Senior user
Posts: 6308
Joined: 2006-08-21 15:38
Location: Denmark

Re: OpenSSL 3.0.1 is here...

Post by SorenR » 2021-12-28 13:03

Neustradamus wrote:
2021-12-28 02:18
Hello hMailServer team,

Time to update?

14-Dec-2021: OpenSSL 3.0.1 is now available, including bug and security fixes
- https://www.openssl.org

Thanks in advance.
OpenSSL3 only compile with hMailServer in 1.1.x mode. Not a hMailServer thing, it's a BOOST thing.
SørenR.

Woke is Marxism advancing through Maoist cultural revolution.

User avatar
Dravion
Senior user
Senior user
Posts: 2071
Joined: 2015-09-26 11:50
Location: Germany
Contact:

Re: OpenSSL 3.0.1 is here...

Post by Dravion » 2022-02-10 23:09

Yes, its the same on my side with Boost 1.78.0
regardless if the Compiler is Version 16.29 (Visual Studio 2019) or 16.30 (Visual Studio 2022).

But it also breaks if i try it with Boost 1.72.0 and OpenSSLv3.

I think we should talk with Martin about it because he successfully managed the hard switch from OpenSSL 1.0.2.x to OpenSSL 1.1.x API in no time (something i tried multiple times without success to be honest).

User avatar
jimimaseye
Moderator
Moderator
Posts: 10053
Joined: 2011-09-08 17:48

Re: OpenSSL 3.0.1 is here...

Post by jimimaseye » 2022-02-11 00:11

Dravion wrote:
2022-02-10 23:09
I think we should talk with Martin
I think I see a problem with your suggestion....
5.7 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

User avatar
Dravion
Senior user
Senior user
Posts: 2071
Joined: 2015-09-26 11:50
Location: Germany
Contact:

Re: OpenSSL 3.0.1 is here...

Post by Dravion » 2022-02-11 01:35

jimimaseye wrote:
2022-02-11 00:11
Dravion wrote:
2022-02-10 23:09
I think we should talk with Martin
I think I see a problem with your suggestion....
Hmm, ok

But someone needs to fix this.
OpenSSL v1.1.x will not be supported for ever

According to Wiki is supported til
Supported until 11 September 2023 (Long Term Support)
https://en.wikipedia.org/wiki/OpenSSL

So we have a bit of time but the sooner we get this sorted the better.

User avatar
RvdH
Senior user
Senior user
Posts: 3231
Joined: 2008-06-27 14:42
Location: The Netherlands

Re: OpenSSL 3.0.1 is here...

Post by RvdH » 2022-02-11 12:01

If you take in mind, openssl 3.x has only got 2, eg: 3.0.0 and 3.0.1 releases since it reached final stable status i think there is plenty of time.
No need to be a early adapter, simply wait until the boost library fully supports openssl 3.x and until that point simply stick with 1.1.x.

There aren't many solutions and projects, some that are way bigger or with a larger user-base than HMS, that made the jump to use openssl 3.x just yet
CIDR to RegEx: d-fault.nl/cidrtoregex
DNS Lookup: d-fault.nl/dnstools
DKIM Generator: d-fault.nl/dkimgenerator
DNSBL Lookup: d-fault.nl/dnsbllookup
GEOIP Lookup: d-fault.nl/geoiplookup

User avatar
SorenR
Senior user
Senior user
Posts: 6308
Joined: 2006-08-21 15:38
Location: Denmark

Re: OpenSSL 3.0.1 is here...

Post by SorenR » 2022-02-11 16:29

On a 32-bit system...

Perl Configure no-asm VC-WIN32 --prefix=%cd%\out32 --openssldir=%cd%\out32 -D_WIN32_WINNT=0x501 enable-weak-ssl-ciphers --api=1.1.0

Problem solved. Boost.org will work with the "--api=1.1.0" parameter.
SørenR.

Woke is Marxism advancing through Maoist cultural revolution.

User avatar
Dravion
Senior user
Senior user
Posts: 2071
Joined: 2015-09-26 11:50
Location: Germany
Contact:

Re: OpenSSL 3.0.1 is here...

Post by Dravion » 2022-02-12 06:15

SorenR wrote:
2022-02-11 16:29
On a 32-bit system...

Perl Configure no-asm VC-WIN32 --prefix=%cd%\out32 --openssldir=%cd%\out32 -D_WIN32_WINNT=0x501 enable-weak-ssl-ciphers --api=1.1.0

Problem solved. Boost.org will work with the "--api=1.1.0" parameter.
Sounds like a good solution til the boost project fixed it's stuff.

Good Job

User avatar
SorenR
Senior user
Senior user
Posts: 6308
Joined: 2006-08-21 15:38
Location: Denmark

Re: OpenSSL 3.0.1 is here...

Post by SorenR » 2022-02-12 10:09

Dravion wrote:
2022-02-12 06:15
SorenR wrote:
2022-02-11 16:29
On a 32-bit system...

Perl Configure no-asm VC-WIN32 --prefix=%cd%\out32 --openssldir=%cd%\out32 -D_WIN32_WINNT=0x501 enable-weak-ssl-ciphers --api=1.1.0

Problem solved. Boost.org will work with the "--api=1.1.0" parameter.
Sounds like a good solution til the boost project fixed it's stuff.

Good Job
Any particular reason for not trusting 1.1.1m?
SørenR.

Woke is Marxism advancing through Maoist cultural revolution.

User avatar
Dravion
Senior user
Senior user
Posts: 2071
Joined: 2015-09-26 11:50
Location: Germany
Contact:

Re: OpenSSL 3.0.1 is here...

Post by Dravion » 2022-02-12 12:18

No,i use 1.1.1m but next year 1.1.1x will fall out of support so its good to know how to built hms with the current version.

User avatar
SorenR
Senior user
Senior user
Posts: 6308
Joined: 2006-08-21 15:38
Location: Denmark

Re: OpenSSL 3.0.1 is here...

Post by SorenR » 2022-02-12 12:47

Dravion wrote:
2022-02-12 12:18
No,i use 1.1.1m but next year 1.1.1x will fall out of support so its good to know how to built hms with the current version.
Next year... A lot can happen in one year. Maybe we all speak russian next year.
SørenR.

Woke is Marxism advancing through Maoist cultural revolution.

User avatar
jimimaseye
Moderator
Moderator
Posts: 10053
Joined: 2011-09-08 17:48

Re: OpenSSL 3.0.1 is here...

Post by jimimaseye » 2022-02-12 13:54

SorenR wrote:
2022-02-12 12:47
A lot can happen in one year
Not in hmailserver world. Nothing has happened much for 5 years and not looking like this is going to be changing any time soon.
5.7 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

User avatar
SorenR
Senior user
Senior user
Posts: 6308
Joined: 2006-08-21 15:38
Location: Denmark

Re: OpenSSL 3.0.1 is here...

Post by SorenR » 2022-02-12 14:28

jimimaseye wrote:
2022-02-12 13:54
SorenR wrote:
2022-02-12 12:47
A lot can happen in one year
Not in hmailserver world. Nothing has happened much for 5 years and not looking like this is going to be changing any time soon.
Now now son... I got the ClamAV 0.104.x thing sorted yesterday on one of my test servers. :mrgreen:

I just need RvdH to confirm and do a 5.7 version.
SørenR.

Woke is Marxism advancing through Maoist cultural revolution.

User avatar
jimimaseye
Moderator
Moderator
Posts: 10053
Joined: 2011-09-08 17:48

Re: OpenSSL 3.0.1 is here...

Post by jimimaseye » 2022-02-12 14:38

SorenR wrote:
2022-02-12 14:28
jimimaseye wrote:
2022-02-12 13:54
SorenR wrote:
2022-02-12 12:47
A lot can happen in one year
Not in hmailserver world. Nothing has happened much for 5 years and not looking like this is going to be changing any time soon.
Now now son...
Just saying....
5.7 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

palinka
Senior user
Senior user
Posts: 4455
Joined: 2017-09-12 17:57

Re: OpenSSL 3.0.1 is here...

Post by palinka » 2022-02-12 15:05

rVDhMailServer is looking pretty good from my vantage point. :D

User avatar
jimimaseye
Moderator
Moderator
Posts: 10053
Joined: 2011-09-08 17:48

Re: OpenSSL 3.0.1 is here...

Post by jimimaseye » 2022-02-12 15:10

palinka wrote:
2022-02-12 15:05
rVDhMailServer is looking pretty good from my vantage point. :D
I agree.
5.7 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

User avatar
mattg
Moderator
Moderator
Posts: 22435
Joined: 2007-06-14 05:12
Location: 'The Outback' Australia

Re: OpenSSL 3.0.1 is here...

Post by mattg » 2022-02-13 02:50

me too
Just 'cause I link to a page and say little else doesn't mean I am not being nice.
https://www.hmailserver.com/documentation

Post Reply