Re: [Development] SSL Plans for Qt 5.6

2015-03-10 Thread Richard Moore
On 10 March 2015 at 14:22, Jan Kundrát j...@kde.org wrote: On Sunday, 22 February 2015 16:27:44 CET, Giuseppe D'Angelo wrote: * RHEL 6 ships 1.0.0, EOL Nov 2020 This is a bit more complex with RHEL because there are many RHEL 6s. RHEL 6.5 and newer ship with 1.0.1e [1], so they are already

Re: [Development] SSL Plans for Qt 5.6

2015-03-10 Thread Jan Kundrát
On Sunday, 22 February 2015 16:27:44 CET, Giuseppe D'Angelo wrote: * RHEL 6 ships 1.0.0, EOL Nov 2020 This is a bit more complex with RHEL because there are many RHEL 6s. RHEL 6.5 and newer ship with 1.0.1e [1], so they are already covered. The older OpenSSL 1.0.0 was present in 6.0 to 6.4.

Re: [Development] SSL Plans for Qt 5.6

2015-02-23 Thread Kevin Kofler
Giuseppe D'Angelo wrote: * RHEL 7 ships 1.0.1, EOL Jun 2014 * CentOS 7 ships 1.0.1, EOL Jun 2014 I think you mean 2024 there (2014 + 10 years). Of course there are other considerations, like RHEL/CentOS 6 both shipping GCC 4.4, so we might end up dropping support for those distributions for

Re: [Development] SSL Plans for Qt 5.6

2015-02-23 Thread Giuseppe D'Angelo
On 24 February 2015 at 03:49, Kevin Kofler kevin.kof...@chello.at wrote: * RHEL 7 ships 1.0.1, EOL Jun 2014 * CentOS 7 ships 1.0.1, EOL Jun 2014 I think you mean 2024 there (2014 + 10 years). Whooops, yes, of course. My bad... Of course there are other considerations, like RHEL/CentOS 6

Re: [Development] SSL Plans for Qt 5.6

2015-02-22 Thread Richard Moore
On 21 February 2015 at 18:38, Thiago Macieira thiago.macie...@intel.com wrote: I suspect enterprise distros etc. will continue to support 1.0.0 for a while. I'm not sure of the level of adoption of 1.0.1 at the moment, so I was erring on the side of caution. Any feedback on this is welcome.

Re: [Development] SSL Plans for Qt 5.6

2015-02-22 Thread Thiago Macieira
On Sunday 22 February 2015 18:50:24 Jeremy Lainé wrote: I understood what you were saying, I think I just expressed my concerns poorly. When I said now way to build even from source, I meant no way to build support for OpenSSL as shipped by Apple. Anyway, my main concern is : how do we

Re: [Development] SSL Plans for Qt 5.6

2015-02-22 Thread Thiago Macieira
On Sunday 22 February 2015 13:37:36 Richard Moore wrote: On 21 February 2015 at 18:38, Thiago Macieira thiago.macie...@intel.com wrote: I suspect enterprise distros etc. will continue to support 1.0.0 for a while. I'm not sure of the level of adoption of 1.0.1 at the moment, so I

Re: [Development] SSL Plans for Qt 5.6

2015-02-22 Thread Giuseppe D'Angelo
On 21 February 2015 at 19:06, Richard Moore r...@kde.org wrote: I suspect enterprise distros etc. will continue to support 1.0.0 for a while. I'm not sure of the level of adoption of 1.0.1 at the moment, so I was erring on the side of caution. Any feedback on this is welcome. Quick

Re: [Development] SSL Plans for Qt 5.6

2015-02-22 Thread Richard Moore
On 22 February 2015 at 17:50, Jeremy Lainé jeremy.la...@m4x.org wrote: On 02/22/2015 06:42 PM, Richard Moore wrote: On 22 February 2015 at 17:39, Jeremy Lainé jeremy.la...@m4x.org wrote: Whilst I agree with the goal of dropping support for old / unmaintained OpenSSL versions, in the

Re: [Development] SSL Plans for Qt 5.6

2015-02-22 Thread Jeremy Lainé
On 02/22/2015 06:57 PM, Richard Moore wrote: Slightly off-topic but related : does the Qt Company have any privileged access to Apple engineers working on Secure Transport? I would like to understand what the plans are regarding support for NPN / ALPN. No idea on that

Re: [Development] SSL Plans for Qt 5.6

2015-02-22 Thread Jeremy Lainé
Hi Rich, On 02/21/2015 06:30 PM, Richard Moore wrote: Here's an outline of stuff I'd like to see get done in the Qt 5.6 time frame: * Complete removal of openssl 0.9.8 support This has been unsupported for a while and was really only retained since it is the only version apple ship on OS X

Re: [Development] SSL Plans for Qt 5.6

2015-02-22 Thread Richard Moore
On 22 February 2015 at 17:39, Jeremy Lainé jeremy.la...@m4x.org wrote: Hi Rich, On 02/21/2015 06:30 PM, Richard Moore wrote: Here's an outline of stuff I'd like to see get done in the Qt 5.6 time frame: * Complete removal of openssl 0.9.8 support This has been unsupported for a

Re: [Development] SSL Plans for Qt 5.6

2015-02-22 Thread Jeremy Lainé
On 02/22/2015 06:42 PM, Richard Moore wrote: On 22 February 2015 at 17:39, Jeremy Lainé jeremy.la...@m4x.org mailto:jeremy.la...@m4x.org wrote: Whilst I agree with the goal of dropping support for old / unmaintained OpenSSL versions, in the case of OS X we probably need to map

Re: [Development] SSL Plans for Qt 5.6

2015-02-22 Thread BogDan
Gingerbrad is using 1.0.0  https://android.googlesource.com/platform/external/openssl.git/+/gingerbread/openssl.version First 1.0.1 was used in Jelly Bean  https://android.googlesource.com/platform/external/openssl.git/+/jb-mr0-release/openssl.version So, for Android the minimum SSL version is

Re: [Development] SSL Plans for Qt 5.6

2015-02-22 Thread Sorvig Morten
On 22 Feb 2015, at 18:50, Jeremy Lainé jeremy.la...@m4x.org wrote: On 02/22/2015 06:42 PM, Richard Moore wrote: On 22 February 2015 at 17:39, Jeremy Lainé jeremy.la...@m4x.org wrote: Whilst I agree with the goal of dropping support for old / unmaintained OpenSSL versions, in the case

Re: [Development] SSL Plans for Qt 5.6

2015-02-22 Thread Richard Moore
On 22 February 2015 at 20:08, Sorvig Morten morten.sor...@theqtcompany.com wrote: On 22 Feb 2015, at 18:50, Jeremy Lainé jeremy.la...@m4x.org wrote: On 02/22/2015 06:42 PM, Richard Moore wrote: On 22 February 2015 at 17:39, Jeremy Lainé jeremy.la...@m4x.org wrote: Whilst I agree

Re: [Development] SSL Plans for Qt 5.6

2015-02-21 Thread Richard Moore
On 21 February 2015 at 18:38, Konstantin Ritt ritt...@gmail.com wrote: 2015-02-21 22:05 GMT+04:00 Richard Moore r...@kde.org: On 21 February 2015 at 17:34, Konstantin Ritt ritt...@gmail.com wrote: 2015-02-21 21:30 GMT+04:00 Richard Moore r...@kde.org: Here's an outline of stuff I'd like

[Development] SSL Plans for Qt 5.6

2015-02-21 Thread Richard Moore
Here's an outline of stuff I'd like to see get done in the Qt 5.6 time frame: * Complete removal of openssl 0.9.8 support This has been unsupported for a while and was really only retained since it is the only version apple ship on OS X (though they don't actually recommend using it). Qt 5.5

Re: [Development] SSL Plans for Qt 5.6

2015-02-21 Thread Konstantin Ritt
2015-02-21 21:30 GMT+04:00 Richard Moore r...@kde.org: Here's an outline of stuff I'd like to see get done in the Qt 5.6 time frame: * Complete removal of openssl 0.9.8 support This has been unsupported for a while and was really only retained since it is the only version apple ship on OS

Re: [Development] SSL Plans for Qt 5.6

2015-02-21 Thread Giuseppe D'Angelo
On 21 February 2015 at 18:30, Richard Moore r...@kde.org wrote: Openssl 0.9.8 will reach EOL in December anyway. In addition to removing the support from the sources, I suspect this will involve some changes to how the library is searched for when we use dlopen. As well as 1.0.0. Should we

Re: [Development] SSL Plans for Qt 5.6

2015-02-21 Thread Thiago Macieira
On Saturday 21 February 2015 18:06:47 Richard Moore wrote: On 21 February 2015 at 17:54, Giuseppe D'Angelo dange...@gmail.com wrote: On 21 February 2015 at 18:30, Richard Moore r...@kde.org wrote: Openssl 0.9.8 will reach EOL in December anyway. In addition to removing the support

Re: [Development] SSL Plans for Qt 5.6

2015-02-21 Thread Konstantin Ritt
2015-02-21 22:05 GMT+04:00 Richard Moore r...@kde.org: On 21 February 2015 at 17:34, Konstantin Ritt ritt...@gmail.com wrote: 2015-02-21 21:30 GMT+04:00 Richard Moore r...@kde.org: Here's an outline of stuff I'd like to see get done in the Qt 5.6 time frame: * Complete removal of openssl

Re: [Development] SSL Plans for Qt 5.6

2015-02-21 Thread Richard Moore
On 21 February 2015 at 17:34, Konstantin Ritt ritt...@gmail.com wrote: 2015-02-21 21:30 GMT+04:00 Richard Moore r...@kde.org: Here's an outline of stuff I'd like to see get done in the Qt 5.6 time frame: * Complete removal of openssl 0.9.8 support This has been unsupported for a while and

Re: [Development] SSL Plans for Qt 5.6

2015-02-21 Thread Thiago Macieira
On Saturday 21 February 2015 22:38:03 Konstantin Ritt wrote: The SecureTransport backend has been already introduced - that's a feature, a dep. library version bump is not Major behaviour change. -- Thiago Macieira - thiago.macieira (AT) intel.com Software Architect - Intel Open Source