On Thu, 7 Dec 2023 at 12:33, Giuseppe D'Angelo
wrote:
> * For how long is QNX going to support OpenSSL 1? Is OpenSSL 3 support
> on the radar?
Yes, it's on the radar for QNX 8, which is not released yet.
> Is there an online resource showing their commitment at
> maintaining it? Is there the
Il 07/12/23 13:55, Kevin Kofler via Development ha scritto:
Why is that Qt's problem? Qt does not and cannot check that all security
updates for all dependencies have been applied, even when using a branch
supported by upstream, so I do not see why this case would be any different.
Because
1)
On Thursday, 7 December 2023 04:55:48 PST Kevin Kofler via Development wrote:
> Qt should just use whatever OpenSSL is installed on the system and be done
> with it. Chances are that any OpenSSL 1 it finds will be from some LTS
> distro with backported security fixes anyway.
I only agree
Giuseppe D'Angelo via Development wrote:
> Innocent users may have their own build scripts that pull OpenSSL 1 and
> build Qt against that, without realizing that they're playing with fire.
> We should never expose users to insecure defaults, hence the opt-in
> flag, and a build error if you ask
Hello,
On 07/12/2023 09:50, Ville Voutilainen wrote:
Well, this is straightforward in the sense that QNX doesn't support
openssl3 yet.
Dropping OpenSSL1 support is dropping support for TLS on QNX, and we don't
want to do that.
Sure, this is the premise of my mail, revert the change.
What
On Thu, 30 Nov 2023 at 12:52, Giuseppe D'Angelo via Development
wrote:
>
> Hi,
>
> OpenSSL 1 has reached EOL last September:
>
> > https://www.openssl.org/blog/blog/2023/09/11/eol-111/
>
>
> Qt has supported OpenSSL 3 for a while, and so last week I pushed a
> patch to drop OpenSSL 1 support from
On 30/11/23 12:49, Giuseppe D'Angelo via Development wrote:
Hi,
OpenSSL 1 has reached EOL last September:
https://www.openssl.org/blog/blog/2023/09/11/eol-111/
Qt has supported OpenSSL 3 for a while, and so last week I pushed a
patch to drop OpenSSL 1 support from Qt. "This has made a lot
Il 30/11/23 11:49, Giuseppe D'Angelo via Development ha scritto:
It turns out that not every platform officially supported by Qt ships
OpenSSL 3 yet. Some of these platforms are promising to maintain OpenSSL
1 for a little while longer,
Orthogonal but related, the patch kind of exposed a
Hi,
OpenSSL 1 has reached EOL last September:
https://www.openssl.org/blog/blog/2023/09/11/eol-111/
Qt has supported OpenSSL 3 for a while, and so last week I pushed a
patch to drop OpenSSL 1 support from Qt. "This has made a lot of people
very angry and been widely regarded as a bad
