Skip to content

Commit 60c6191

Browse files
committed
Add info about end of support for OpenSSL <3.0
1 parent e6ae3d5 commit 60c6191

File tree

2 files changed

+6
-2
lines changed

2 files changed

+6
-2
lines changed

CHANGELOG.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,9 +33,10 @@
3333
- Documentation improvements (#4476, #4487, #4488)
3434
- CI improvements (#4459)
3535

36-
## Known issues
36+
## Known issues and upgrade recommendations
3737
- If you are using MongooseIM 4.1.0 to 6.3.1 with SCRAM authentication and OpenSSL >=3.4.1, hashes for algorithms stronger than SHA-1 are calculated incorrectly.
3838
This issue is fixed in this release. See [SCRAM hashing issue](/doc/developers-guide/SCRAM-serialization.md#scram-hash-calculation-issue-in-mongooseim-410631) for details and required actions.
39+
- OpenSSL versions below 3.0 are no longer supported. If you are using OpenSSL 1.x or older, you must upgrade to OpenSSL 3.x before updating MongooseIM, as older versions will not work.
3940

4041
## Commits, merged PRs and closed issues
4142
- [List of merged PRs](https://github.com/esl/MongooseIM/pulls?q=is%3Apr+is%3Amerged+milestone%3A6.3.2)

doc/migrations/6.3.1_6.3.2.md

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -88,8 +88,11 @@ Migration scripts for CockroachDB, PostgreSQL, MySQL, and MS SQL are available i
8888

8989
System message translations are now handled by [`service_translations`](../configuration/Services.md#service_translations). Translations files can be found in [`priv/translations/`](https://github.com/esl/MongooseIM/tree/master/priv/translations/).
9090

91-
### SCRAM hashing fix
91+
## SCRAM hashing fix
9292

9393
In versions 6.3.1 and earlier, a bug caused incorrect hash calculations for SCRAM authentication when using algorithms stronger than SHA-1 with OpenSSL >=3.4.1.
9494
This release includes a fix for this issue. If you were affected, all users must reset their passwords after upgrading to ensure correct authentication.
9595
For more details, see [SCRAM hashing issue](../developers-guide/SCRAM-serialization.md#scram-hash-calculation-issue-in-mongooseim-410631).
96+
97+
## OpenSSL <3.0 no longer supported
98+
All OpenSSL versions below 3.0 are no longer supported. If your deployment relies on OpenSSL 1.x or older, you must upgrade to OpenSSL 3.x before updating MongooseIM, as older versions will not work.

0 commit comments

Comments
 (0)