Apache Mina SSHD adapt to Apache MINA 2.2.x

[07070529]

Description

Hi, I see that Apache MINA 2.2.x rewrites the SSL/TLS layer to address some flaws that were hard to fix in 2.1.x. Apache Mina SSHD depends on Apache MINA, but the latest released version of Apache Mina SSHD (2.9.2) depends on Apache MINA 2.0.23. So, I'd like to ask if there are plans to release a new version of Apache Mina SSHD to adapt to Apache MINA 2.2.x.

Motivation

The motivation I raise this issue is that we are using Apache MINA and Apache Mina SSHD together. Currently, we are using Apache Mina SSHD version 2.9.2, and we want to use the more secure Apache MINA version 2.2.1. However, Apache MINA 2.2 and 2.1 have incompatible changes (https://mina.apache.org/mina-project/2.2-vs-2.1.html) . Using Apache Mina SSHD 2.9.2 and Apache MINA 2.2.1 together has compatibility issues. Therefore, we wanted to know if there are plans to release a new version of Apache Mina SSHD to adapt to Apache MINA 2.2.x?

Alternatives considered

No response

Additional context

No response

[tomaswolf]

Unfortunately MINA 2.0.x and 2.2.x are not source compatible. Switching might also require testing effort. (Perhaps we'd be lucky, and everything just still works. But maybe not.)

We don't really have the resources to do this. Some clients also use the MINA 2.0.x integration quite happily, and for them a switch to 2.2.x would also incur substantial testing effort.

If this is attempted, I think it should be done in way that lets clients still choose wither MINA 2.0 or 2.2. Which might, because of this source incompatibility, not trivial to achieve.

[07070529]

We understand. Thanks for your reply.