Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[YSQL] [DocDB] Upgrade OpenSSL to 3.0.8 from 1.1.1 #16407

Closed
7 tasks done
timothy-e opened this issue Mar 13, 2023 · 2 comments
Closed
7 tasks done

[YSQL] [DocDB] Upgrade OpenSSL to 3.0.8 from 1.1.1 #16407

timothy-e opened this issue Mar 13, 2023 · 2 comments
Assignees
@es1024
Labels
2.14 Backport Required 2.16 Backport Required 2.18 Backport Required 2.20 Backport Required area/docdb YugabyteDB core features area/ysql Yugabyte SQL (YSQL) kind/enhancement This is an enhancement of an existing feature priority/high High Priority

Comments

@timothy-e
Copy link
Contributor

timothy-e commented Mar 13, 2023 •
edited by rthallamko3
Loading

Jira Link: DB-5816

Description

Upgrade the OpenSSL version from 1.1.1 to 3.0.8, as 1.1.1 version support is ending.

Advantages of upgrading to OpenSSL 3.0.8:

OpenSSL migration guide

Warning: Please confirm that this issue does not contain any sensitive information

  • I confirm this issue does not contain any sensitive information.
@timothy-e timothy-e added area/ysql Yugabyte SQL (YSQL) status/awaiting-triage Issue awaiting triage labels Mar 13, 2023
@yugabyte-ci yugabyte-ci added kind/bug This issue is a bug priority/medium Medium priority issue labels Mar 13, 2023
@yugabyte-ci yugabyte-ci added kind/enhancement This is an enhancement of an existing feature and removed kind/bug This issue is a bug status/awaiting-triage Issue awaiting triage labels Mar 28, 2023
@mbautin mbautin mentioned this issue Oct 5, 2023
Closed
1 task
@mbautin mbautin changed the title [YSQL] Upgrade OpenSSL to 3.0 from 1.1.1 [YSQL] [DocDB] Upgrade OpenSSL to 3.0 from 1.1.1 Oct 5, 2023
@mbautin
Copy link
Collaborator

mbautin commented Oct 5, 2023

Recommendation from @proff4eg : upgrade to OpenSSL 3.1.0 (fips 140-3 certification).

@bmatican
Copy link
Contributor

bmatican commented Oct 5, 2023

Notes for future: https://www.openssl.org/docs/man3.0/man7/migration_guide.html#:~:text=Applications%20written%20to%20work%20with,concepts%20introduced%20in%20OpenSSL%203.0.

Upgrading from OpenSSL 1.1.1

@mbautin mbautin assigned es1024 and unassigned suranjan Oct 9, 2023
@yugabyte-ci yugabyte-ci added priority/high High Priority and removed priority/medium Medium priority issue labels Oct 10, 2023
@es1024 es1024 mentioned this issue Oct 24, 2023
Merged
es1024 added a commit to yugabyte/yugabyte-db-thirdparty that referenced this issue Oct 25, 2023
@es1024
Update OpenSSL to 3.1.3 (#239)
31a3b7d 
Context: yugabyte/yugabyte-db#16407
This was referenced Oct 30, 2023
Closed
Closed
Closed
Closed
@es1024 es1024 changed the title [YSQL] [DocDB] Upgrade OpenSSL to 3.0 from 1.1.1 [YSQL] [DocDB] Upgrade OpenSSL to 3.1.3 from 1.1.1 Oct 30, 2023
This was referenced Oct 31, 2023
Merged
Merged
Merged
@es1024 es1024 changed the title [YSQL] [DocDB] Upgrade OpenSSL to 3.1.3 from 1.1.1 [YSQL] [DocDB] Upgrade OpenSSL to 3.0.8 from 1.1.1 Nov 2, 2023
@es1024 es1024 mentioned this issue Nov 2, 2023
Merged
es1024 added a commit to yugabyte/yugabyte-db-thirdparty that referenced this issue Nov 3, 2023
@es1024
Change OpenSSL version to 3.0.8 (#248)
7b0f452 
Moving to 3.0.8 for now due to it being FIPS 140-2 certified, per slack
discussion. The previous 3.1.3 change hasn't been pulled into the main
repo yet, so there should be no problems.

Context: yugabyte/yugabyte-db#16407
mbautin pushed a commit to mbautin/yugabyte-db-thirdparty that referenced this issue Nov 7, 2023
@es1024 @mbautin
Change OpenSSL version to 3.0.8 (yugabyte#248)
18b13a2 
Moving to 3.0.8 for now due to it being FIPS 140-2 certified, per slack
discussion. The previous 3.1.3 change hasn't been pulled into the main
repo yet, so there should be no problems.

Context: yugabyte/yugabyte-db#16407
@es1024 es1024 mentioned this issue Nov 10, 2023
Merged
es1024 added a commit to yugabyte/yugabyte-db-thirdparty that referenced this issue Nov 14, 2023
@es1024
[BACKPORT 2.16] Update OpenSSL to 3.0.8 (#245)
282a0b2 
Also bumps krb5 to 1.20.1 (what master is on) to resolve compilation
issues.

Context: yugabyte/yugabyte-db#16407
Original PR: #239, #248
es1024 added a commit to yugabyte/yugabyte-db-thirdparty that referenced this issue Nov 14, 2023
@es1024
[BACKPORT 2.14] Update OpenSSL to 3.0.8 (#244)
b41c487 
Also bumps krb5 to 1.20.1 (what master is on) to resolve compilation
issues.

Context: yugabyte/yugabyte-db#16407
Original PR: #239, #248
es1024 added a commit to yugabyte/yugabyte-db-thirdparty that referenced this issue Nov 14, 2023
@es1024
[BACKPORT 2.20] Update OpenSSL to 3.0.8 (#255)
44dd1e3 
Context: yugabyte/yugabyte-db#16407
Original PR: #239, #248
es1024 added a commit to yugabyte/yugabyte-db-thirdparty that referenced this issue Nov 14, 2023
@es1024
[BACKPORT 2.18] Update OpenSSL to 3.0.8 (#246)
1e1134f 
Context: yugabyte/yugabyte-db#16407
Original PR: #239, #248
@es1024 es1024 closed this as completed Nov 28, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@es1024 es1024

Labels
2.14 Backport Required 2.16 Backport Required 2.18 Backport Required 2.20 Backport Required area/docdb YugabyteDB core features area/ysql Yugabyte SQL (YSQL) kind/enhancement This is an enhancement of an existing feature priority/high High Priority
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
7 participants
@suranjan @bmatican @mbautin @es1024 @rthallamko3 @yugabyte-ci @timothy-e