Interesting, you can purchase support for 1.1.1x between 15,000 -- 50,000 USD per year. I can see some large Companies in panic mode now, so the option exists for them to continue with older versions.
This explains why NetBSD 10.0 people are holding the release until they get the new version working in Base and pkgsrc.
> Interesting, you can purchase support for 1.1.1x between 15,000 -- 50,000 USD per year.
Nitpick, from the announcement, only the Premium contract ($50K per year) provides for extended 1.1.1 support:
Another option is to purchase a premium support contract which offers extended support (i.e. ongoing access to security fixes) for 1.1.1 beyond its public EOL date. There is no defined end date for this extended support and we intend to continue to provide it for as long as it remains commercially viable for us to do so (i.e. for the foreseeable future).
Can you get support for 15k? My reading of that page is that extended support is only for the top 50k a year package. Though in reality RedHat and others will keep OpenSSL 1.1.1 patched for quite a while yet.
This explains why NetBSD 10.0 people are holding the release until they get the new version working in Base and pkgsrc.
https://www.openssl.org/support/contracts.html#premium