How long Legacy providers supported?

[Tomas Mraz]

If you're talking about the algorithms in the legacy provider (and not
the deprecated legacy API support) then there are no definitive plans
when algorithms that are placed in that provider will be removed
completely.

The legacy provider itself is not going away at all as more algorithms
will be moved to it in future (I assume DSA and SHA1 would be one of
those). However eventually some algorithms that are in it currently
might be completely dropped.

Every removals of algorithms provided by a particular provider (i.e.,
default in case of migration of for example DSA to the legacy provider,
or legacy in case we remove for example MD2 from it) can happen only on
a major version boundary. So 4.0 would be the earliest possible time.
However it does not mean that it must happen at 4.0 and not 5.0 or any
time later.

We also do not have any timeframe for the 4.0 release so the only
answer I can give you is that the removals of existing legacy
algorithms won't happen any time soon (like 1-2 years from now).

Tomas Mraz, OpenSSL

On Mon, 2023-07-24 at 12:47 +0530, Ishani wrote:
> Hi ,
>   
>     I'm aware that in future legacy providers will not be supported
> and we must plan to migrate .
> 
> but I would like to know how long Legacy providers will be supported
> to plan our migration work ?
> 
> 
> 
>   
>    

-- 
Tomáš Mráz, OpenSSL