https://bz.apache.org/ooo/show_bug.cgi?id=127789

--- Comment #45 from Ariel Constenla-Haile <[email protected]> ---
(In reply to Matthias Seidel from comment #44)
> No objections against updating openssl but that doesn't help us with the
> update feed not working for released versions of AOO.
> Here we need to find a solution on the server side where the generated feeds
> reside.

I'm not sure what the problem with the AOO update servers is, but the reason
for the bug described here is that the openssl version included in AOO is too
old and is trying to connect with TLSv1.0.

There is no way to patch released versions, so the only solution for released
versions would be to add support for TLSv1.0 in the servers, but for sure
sysadmins wouldn't do that, TLSv1.0 is "actively being deprecated in accordance
with guidance from government agencies"
https://tools.ietf.org/id/draft-ietf-tls-oldversions-deprecate-02.html

> (BTW: Update feeds work in trunk/AOO42X)

That's because it has a newer openssl version. But is it working in 4.1.8?

-- 
You are receiving this mail because:
You are the assignee for the issue.

Reply via email to