Changeset f7c33596 for chapter08/openssl.xml

Timestamp:

06/26/2022 11:17:17 AM (22 months ago)

Author:

Xi Ruoyao <xry111@…>

Branches:

xry111/clfs-ng

Children:

e4d72ed

Parents:

100ca4e (diff), bfc6495 (diff)
Note: this is a merge changeset, the changes displayed below correspond to the merge itself.
Use the (diff) links above to see all the changes relative to each parent.

Message:

Merge branch 'trunk' into xry111/clfs-ng

File:

• chapter08/openssl.xml (modified) (2 diffs)

chapter08/openssl.xml

@@ -82 +82 @@
       <para>
         You should update OpenSSL when a new version which fixes vulnerabilities
-        is announced. The releases run in series, with a letter for each release
-        after the initial release (e.g. 1.1.1, 1.1.1a, 1.1.1b, etc). Because LFS
-        installs only the shared libraries, there is no need to recompile packages
-        which link to <filename class="libraryfile">libcrypto.so</filename> or
+        is announced.  Since OpenSSL 3.0.0, the OpenSSL versioning scheme
+        follows the MAJOR.MINOR.PATCH format.  API/ABI compatibility
+        are guaranteed for the same MAJOR version number.  Because LFS
+        installs only the shared libraries, there is no need to recompile
+        packages which link to
+        <filename class="libraryfile">libcrypto.so</filename> or
         <filename class="libraryfile">libssl.so</filename>
-        <emphasis>when upgrading in the same series.</emphasis>
+        <emphasis>when upgrading to a version with MAJOR version number
+        unchanged</emphasis>.
       </para>
 
@@ -133 +136 @@
         <listitem>
           <para>
-            is a <application>Perl</application> script that scans all files in
-            a directory and adds symbolic links to their hash values
+            is a <application>Perl</application> script that
+            scans all files in a directory and adds symbolic links to their
+            hash values.  Use of <command>c_rehash</command> is considered
+            obsolete and should be replaced by
+            <command>openssl rehash</command> command
           </para>
           <indexterm zone="ch-system-openssl c_rehash">