[X] Yes, release Proton 0.8 RC4 as 0.8 final. make test on Fedora19 and Centos6 make install on Centos6 verified against pyngus (trunk) and oslo.messaging (trunk) verified sslv3 is rejected
----- Original Message ----- > From: "Rafael Schloming" <r...@alum.mit.edu> > To: proton@qpid.apache.org > Sent: Thursday, October 23, 2014 12:21:32 PM > Subject: VOTE: Release Proton 0.8 RC4 as 0.8 final > > Hi Everyone, > > I've put together RC4. This is pretty much the same as RC3 with a number of > fixes to disable those SSL versions that are vulnerable to attack. > > The sources are available here: > > - http://people.apache.org/~rhs/qpid-proton-0.8rc4/ > > Java binaries are here: > > - https://repository.apache.org/content/repositories/orgapacheqpid-1020/ > > Changes since RC3: > > - PROTON-724: make sure to pop any pending output in > pn_transport_close_head() > - PROTON-720: [Windows IO] fix format specifier to print string > - added dispatch utility > - fixed error message > - fixed Collector.put > - PROTON-719 : prevent ssl3 connections in Windows with schannel > - PROTON-717: disable SSLv3 > - PROTON-717: mitigate the CRIME SSL vulnerability > - PROTON-716: reject connections using SSLv3 - it is insecure > > Please check the sources out and register your vote: > > [ ] Yes, release Proton 0.8 RC4 as 0.8 final. > [ ] No, because... > > --Rafael > -- -K
