Update to newer OpenSSL?

[eschnett]

OpenSSH 3.0 (which Julia currently uses) might be unsupported after September 2026 (see https://openssl-library.org/source/). Should we switch to OpenSSH 3.5, the next LTS version of OpenSSH which was recently released? According to the documentation these versions should be API/ABI compatible.

[giordano]

Where does Julia use openssh exactly?

[giordano]

I think you're talking about openssl instead?

[eschnett]

Yes, d'oh, this is about OpenSSL. 3.5 is the new LTS.

[giordano]

If v3.5 has already been designated to be the next LTS then it sounds more than reasonable to switch to that version.

PS: your first post still refers to OpenSSH multiple times.

[visr]

Updating to 3.5 should also help Python interoperability quite a bit. PythonCall via CondaPkg now needs to hold back Conda OpenSSL versions to 3.0 to avoid segfaults like JuliaPy/PythonCall.jl#586 (comment). But since conda-forge doesn't stick to OpenSSL LTS versions the ecosystem has long moved on and we cannot use PythonCall with recent Python releases.