https://bz.apache.org/ooo/show_bug.cgi?id=127789

--- Comment #46 from Matthias Seidel <[email protected]> ---
(In reply to Ariel Constenla-Haile from comment #45)
> (In reply to Matthias Seidel from comment #44)
> I'm not sure what the problem with the AOO update servers is, but the reason
> for the bug described here is that the openssl version included in AOO is
> too old and is trying to connect with TLSv1.0.

Exactly!

> There is no way to patch released versions, so the only solution for
> released versions would be to add support for TLSv1.0 in the servers, but
> for sure sysadmins wouldn't do that, TLSv1.0 is "actively being deprecated
> in accordance with guidance from government agencies"
> https://tools.ietf.org/id/draft-ietf-tls-oldversions-deprecate-02.html

That has been discussed on dev@. Unfortunately we didn't make any progress.
A solution would be a single server hosting only the few update feeds.

> > (BTW: Update feeds work in trunk/AOO42X)
> 
> That's because it has a newer openssl version. But is it working in 4.1.8?

Nothing has changed in this respect in 4.1.8.

-- 
You are receiving this mail because:
You are the assignee for the issue.

Reply via email to