From 8452a3f7c9e76a9648387882a83a13eee6e9b24f Mon Sep 17 00:00:00 2001 From: Willy Tarreau Date: Wed, 29 May 2024 10:23:59 +0200 Subject: [PATCH] DOC: install: update the range of tested openssl version to cover 3.3 OpenSSL 3.3 is known to work since it's tested on the CI, to let's add it to the list of known good versions. --- INSTALL | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/INSTALL b/INSTALL index 0067f38e6..86fe7b690 100644 --- a/INSTALL +++ b/INSTALL @@ -235,7 +235,7 @@ to forcefully enable it using "USE_LIBCRYPT=1". ----------------- For SSL/TLS, it is necessary to use a cryptography library. HAProxy currently supports the OpenSSL library, and is known to build and work with branches -1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1, 3.0, 3.1 and 3.2. It is recommended to use +1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1, and 3.0 to 3.3. It is recommended to use at least OpenSSL 1.1.1 to have support for all SSL keywords and configuration in HAProxy. OpenSSL follows a long-term support cycle similar to HAProxy's, and each of the branches above receives its own fixes, without forcing you to