[Pkg-openssl-devel] ALPN for HTTP/2 in jessie(-backports)?

[Kurt Roeckx]

On Sun, Jul 03, 2016 at 09:49:26PM +0800, Aron Xu wrote:
> On Sun, Jul 3, 2016 at 6:42 PM, Kurt Roeckx <kurt at roeckx.be> wrote:
> > On Sun, Jul 03, 2016 at 05:37:58PM +0800, Aron Xu wrote:
> >> Hi,
> >>
> >> Google has pushed Chrome 51 which disables NPN, breaking many of the HTTP/2
> >> services because the least version of supporting ALPN is openssl 1.0.2
> >> (1.0.1k in jessie-security).
> >>
> >> In jessie-backports we have things like nginx in backports that I believe
> >> having quite some users, what should we do? Should 1.0.2 be pushed to
> >> -security?
> >
> > I've prepared an upload of 1.0.2 for jessie-backports, I will
> > probably upload it later today.
> >
> >
> 
> 
> Thanks. What's the plan for 2017 - when 1.0.1 upstream EOL?

I intend to support 1.0.1 in Debian for as long as Debian supports
it, including any LTS.


Kurt