Re: [Interest] Qt Android with OpenSSL problems "OpenSSL vulnerabilities in your apps"

2018-10-31 Thread René Hansen
Somehow it seems you're still bundling 1.0.1e, so that's what you need to look for. I'm not sure where to start, since I don't know your specific project but afaik OpenSSL was a manual include as far back as 5.6 , so the version you're using, 5.9.4, shou

Re: [Interest] Qt Android with OpenSSL problems "OpenSSL vulnerabilities in your apps"

2018-10-30 Thread Nguyen Ngoc Thach Chau
The problem is not about send HTTPS request, It is about Google Play Store rejection. Google Play Store still alert me about OpenSSL library & do not let me upload to play store Refer alert here: https://support.google.com/faqs/answer/6376725 :( I update library and re-upload but still do not succe

Re: [Interest] Qt Android with OpenSSL problems "OpenSSL vulnerabilities in your apps"

2018-10-29 Thread René Hansen
Nguyen, I've just updated from 1.0.2n in my own app to 1.0.2p, using my own homegrown build system for OpenSSL. It seems to work and I can complete https request just fine. This is what I get in the app when I query the version: main.cpp:117 (int main(int, char**)): sslLibraryVersionString() "Ope

Re: [Interest] Qt Android with OpenSSL problems "OpenSSL vulnerabilities in your apps"

2018-10-29 Thread Thiago Macieira
On Monday, 29 October 2018 00:58:20 PDT Nguyen Ngoc Thach Chau wrote: > I checked APK, it is return openSSL 1.0.2k but it is confusing then I want 1.0.2k is not up-to-date. Upgrade to 1.0.2p. -- Thiago Macieira - thiago.macieira (AT) intel.com Software Architect - Intel Open Source Technology

Re: [Interest] Qt Android with OpenSSL problems "OpenSSL vulnerabilities in your apps"

2018-10-29 Thread Nguyen Ngoc Thach Chau
Yes. I did it but Play Store keep alert again :( I also build new OpenSSL 1.0.2p About using command "sslLibraryVersionString ()", I still get openSSL 1.0.1e I check build folder, new library (1.0.2p) are there. Any hints :( ? On Mon,

Re: [Interest] Qt Android with OpenSSL problems "OpenSSL vulnerabilities in your apps"

2018-10-29 Thread René Hansen
It looks like you're bundling the stale version of OpenSSL. Try deleting your *build-* folder to get a fresh one and maybe set *ANDROID_EXTRA_LIBS *to point directly to the libs outside of your project folder. /René On Mon, 29 Oct 2018 at 10:38 Nguyen Ngoc Thach Chau wrote: > Thank you Rene > >

Re: [Interest] Qt Android with OpenSSL problems "OpenSSL vulnerabilities in your apps"

2018-10-29 Thread Nguyen Ngoc Thach Chau
Thank you Rene I check by source code functions below: long sslLibraryVersionNumber () QString sslLibraryVersionString () long sslLibraryBuildVersionNumber

Re: [Interest] Qt Android with OpenSSL problems "OpenSSL vulnerabilities in your apps"

2018-10-29 Thread René Hansen
Try to make sure you're actually on the right version, from inside the app. Ie, what does *OpenSSL_version(OPENSSL_VERSION)* return? Your setting of *ANDROID_EXTRA_LIBS* looks correct enough. /René On Mon, 29 Oct 2018 at 08:59 Nguyen Ngoc Thach Chau wrote: > Dear supporters > > I'm using Qt A

[Interest] Qt Android with OpenSSL problems "OpenSSL vulnerabilities in your apps"

2018-10-29 Thread Nguyen Ngoc Thach Chau
Dear supporters I'm using Qt Android for mobile project. When I upload APK file to Google Play Store, they always send me an alert as below = https://support.google.com/faqs/answer/6376725 = I checked APK, it is return openSSL 1.0.2k but it is confusing then I want to ask t