From c3bbd41eefd78f5dc51e96493434f031f7868477 Mon Sep 17 00:00:00 2001
From: Daniel Stenberg <daniel@haxx.se>
Date: Wed, 27 Aug 2025 08:01:17 +0200
Subject: [PATCH] DEPRECATE.md: drop old OpenSSL versions

Closes #18413
---
 docs/DEPRECATE.md | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/docs/DEPRECATE.md b/docs/DEPRECATE.md
index bc4c0fc6ab..65c630cbee 100644
--- a/docs/DEPRECATE.md
+++ b/docs/DEPRECATE.md
@@ -48,6 +48,20 @@ Making the new minimum target Windows version Vista / Server 2008.
 
 In March 2026, we drop support for all c-ares versions before 1.16.0.
 
+## OpenSSL 1.0.2
+
+OpenSSL and others only ship fixes for this version to paying customers,
+meaning users of the free version risk being vulnerable.
+
+We remove support for this OpenSSL version from curl in December 2025.
+
+## OpenSSL 1.1.1
+
+OpenSSL and others only ship fixes to paying customers, meaning users of the
+free version risk being vulnerable.
+
+We remove support for this OpenSSL version from curl in June 2026.
+
 ## Past removals
 
  - axTLS (removed in 7.63.0)