New OpenSSL Releases

[Dennis Clarke]

On 9/12/23 12:34, Matt Caswell wrote:
> The OpenSSL project team would like to announce the upcoming release of 
> OpenSSL versions 3.1.3 and 3.0.11.
> 
> These releases will be made available on Tuesday 19th September 2023 
> between 1300-1700 UTC.
> 
> These are security-fix releases. The highest severity issue fixed in 
> each of these two releases is Low:
> 
> https://www.openssl.org/policies/secpolicy.html


     Can the OTC ( OpenSSL Technical Committee [1] ) please have a
meeting and then issue a clear statement regarding section 14 of
the Coding Style document :

         https://www.openssl.org/policies/technical/coding-style.html

         Chapter 14: Portability

         To maximise portability the version of C defined in
         ISO/IEC 9899:1990 should be used. This is more commonly
         referred to as C90. ISO/IEC 9899:1999 (also known as C99) is
         not supported on some platforms that OpenSSL is used on and
         therefore should be avoided.

     There I see the use of the word "should" as opposed to "must".

     The codebase has drifted and there are a very few places where an
honest attempt to comply with ISO/IEC 9899:1990 will fail. My intention
here is clarity of compliance statement such that portability is assured
in much the same way as the Curl/libCurl projects and a few others.

--
Dennis Clarke
RISC-V/SPARC/PPC/ARM/CISC
UNIX and Linux spoken

[1] https://www.openssl.org/community/otc.html