fluent / fluent/fluent-bit

Update to OpenSSL 3.x where possible for official packages

Open
#7,644 4 comments 0 reactions 0 assignees View on GitHub
exempt-stale feature-request packaging
Dominant language
C
Stars
8.1k
Forks
2k
Avg merge
4d 16h
Merged PRs (30d)
58

Description

**Is your feature request related to a problem? Please describe.**

OpenSSL 3.x series should be compatible with Fluent Bit and is used for the most recent Ubuntu 22 target but almost all other targets still prefer to use OpenSSL 1.x series. This can lead to security issues and is not best practice so we should step up to OpenSSL 3.x series for all possible targets.

https://github.com/fluent/fluent-bit/blob/0714d10889394652f8c1e0ef703d568c9274f2b2/packaging/distros/ubuntu/Dockerfile#L112-L122

We need to ensure there is no dual linkage to both OpenSSL libraries via other dependencies.

**Describe the solution you'd like**

See above.

Modify the official build containers in [`packaging/distros` ](https://github.com/fluent/fluent-bit/tree/master/packaging/distros).

**Describe alternatives you've considered**
None.

**Additional context**

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.