Upgrade to OpenSSL 1.0.0 ?

[Aleksander Adamowski]

Hello!

>From looking at the mailing list I can see that a preliminary
discussion about upgrading OpenSSL to 1.0.0 took plave in 2010
(http://sourceware.org/ml/cygwin-apps/2010-06/msg00174.html).

Is the upgrade going to happen?

I'm asking because the currently used OpenSSL version (0.9.8) has
significant problems with SSL version negotiation, that manifest e.g.
in libcurl with the error:

SSL routines:SSL23_GET_SERVER_HELLO:reason(1112)

See:
http://sourceforge.net/tracker/?func=detail&atid=100976&aid=3395520&group_id=976

This particular error makes it practically impossible in Cygwin to use
GIT over HTTPS (like provided by GitHub) - no known workaround exists
that would employ environment variables or custom config files for
either libcurl, Git or OpenSSL. One would have to compile OpenSSL
1.0.0, libcurl and Git by hand.

Best Regards,
  Aleksander Adamowski