On 07/26/2018 01:47 PM, Peter Robinson wrote:

On Thu, Jul 26, 2018 at 6:37 PM, Robert Moskowitz rgm@htt-consult.com wrote:

...

I would like to find out the status of openssl 1.1.1 support in development.

I went to https://koji.fedoraproject.org/koji/tasks?state=all&view=tree&method...

for the current builds and looked at

https://koji.fedoraproject.org/koji/taskinfo?taskID=28586088 for F29 Xfce.

I did a little digging for components and on

https://koji.fedoraproject.org/koji/rpmlist?buildrootID=13188575%20&star...

I see openssl-libs-1:1.1.0h-5.fc29.armv7hl.rpm, and not openssl itself (but I am assuming it would also be 1.1.0h

well the libs is just a subpackage of the overall that contains just libraries with out utils and dev libraries.

...

So is 1.1.1 (currently still in beta) available in any of the test images?

openssl-1.1.1-0.pre8.fc29 was built and tagged into f29 late yesterday so it will be in the next successful compose which might be tomorrow (there's been a few issues), look for the next rawhide report to the mailing list, else you can just "dnf upgrade" your current f29 image and you'll get it once it makes the mirrors.

With:  Fedora-Xfce-armhfp-Rawhide-20180726.n.2-sda.raw.xz

# openssl version OpenSSL 1.1.1-pre8 (beta) FIPS 20 Jun 2018

So now let's see how making an ED25519 PKI works.

See my Internet draft: draft-moskowitz-ecdsa-pki-03

For what I did for ecdsa.  The plan is to duplicate this.

Thanks for making the jump to openssl 1.1.1