SP 2.6.1 build against OpenSSL 1.1.x

[Cantor, Scott]

> Does this mean that the SP doesn't "support" OpenSSL 1.1.x yet?

No. Rod did all the patches and they're checked in, and I spent most of December so far doing Santuario API changes in preparation to get a 2.0 released as the second in a set of steps to get a 3.0 SP out the door next year. (Xerces 3.2 was the first step.)

> If so, any thoughts about when that might happen? My guess is RHEL 8
> will drive it and probably nothing sooner. Is that correct?

We go by what OpenSSL is saying and they support 1.0.2 until the end of 2019 I believe.
 
Since Red Hat already broke curl, and has broken Xerces by letting it rot, I'm not sure i care to even use their OpenSSL packages, it's not as though it's buying me much. If there were a reason we couldn't meet that timeline, I'd package 1.0.2. I don't expect to have to do that though (is 8 even in beta?)

> (This is not a security question of course...I am just planning some
> other work and thinking about when I can make the transition to OpenSSL
> 1.1.0).

Best case is late Q1. At this point I put a slightly higher priority on getting the SP out the door than on V3.4 but that could push 3.4 farther out than we can allow.

-- Scott