Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #915858 > unrolled thread

Bug#907774: [libqt5network5] Requires openssl >= 1.1.1

Back to article view | Back to linux.debian.bugs.dist

Contents

  Bug#907774: [libqt5network5] Requires openssl >= 1.1.1 Adrien <bugs-debian@antipoul.fr> - 2018-09-01 22:00 +0200
    Bug#907774: Confirmed Adam Cécile <acecile@le-vert.net> - 2018-09-11 00:20 +0200
    Bug#907774: Bug#908567: libssl 1.1.1 TLS_MAX_VERSION ABI breakage Lisandro Damián Nicanor Pérez Meyer <perezmeyer@gmail.com> - 2018-09-11 18:00 +0200
    Bug#907774: [Pkg-openssl-devel] Bug#908567: Bug#908567: libssl 1.1.1 TLS_MAX_VERSION ABI breakage Kurt Roeckx <kurt@roeckx.be> - 2018-09-11 19:20 +0200

#915858 — Bug#907774: [libqt5network5] Requires openssl >= 1.1.1

[Multipart message — attachments visible in raw view] — view raw

Package: libqt5network5
Version: 5.11.1+dfsg-7
Severity: important

--- Please enter the report below this line. ---

Hi,

I'm using owncloud-client, and connection failed with the following log:


[ warning sync.connectionvalidator ]:
QNetworkReply::NetworkError(UnknownNetworkError) "Error while setting
the maximum protocol version" ""


After running gdb, it seems that in
src/network/ssl/qsslcontext_openssl11.cpp on line 151, the
sslContext->sslConfiguration.protocol() is set to QSsl::SecureProtocols,
so minVersion is set to TLS1_VERSION and maxVersion is set
TLS_MAX_VERSION. However, I have currently blocked the upgrading to
openssl1.1.1 so on my system, with openssl1.1.0, the TLS_MAX_VERSION is
defined to TLS1_2_VERSION.

But gdb reports me that maxVersion is set to 0x0304, which is the value
of TLS_MAX_VERSION in openssl1.1.1 as it as an alias for TLS1_3_VERSION.


Thus, I think that you should require a version of openssl greater or
equal than 1.1.1 to avoid those issues.


Thanks for maintaining the package,

Adrien


--- System information. ---
Architecture:
Kernel: Linux 4.17.0-3-amd64

Debian Release: buster/sid
500 unstable-debug debug.mirrors.debian.org
500 unstable ftp.fr.debian.org
500 testing download.jitsi.org
1 experimental ftp.fr.debian.org

--- Package information. ---
Depends (Version) | Installed
=====================================-+-================
libssl1.1 | 1.1.0h-4
libc6 (>= 2.14) | 2.27-5
libqt5core5a (>= 5.11.0~rc1) | 5.11.1+dfsg-7
libqt5dbus5 (>= 5.0.2) | 5.11.1+dfsg-7
libstdc++6 (>= 5) | 8.2.0-4
qtbase-abi-5-11-0 |
zlib1g (>= 1:1.1.4) | 1:1.2.11.dfsg-1


Package's Recommends field is empty.

Package's Suggests field is empty.

[toc] | [next] | [standalone]

#917484 — Bug#907774: Confirmed

Hello,

I can confirme owncloud desktop client stopped working for me as well.
Reverting to this package made it work again:

http://ftp.debian.org/debian/pool/main/q/qtbase-opensource-src/libqt5network5_5.11.1+dfsg-6_amd64.deb

Regards, Adam.

[toc] | [prev] | [next] | [standalone]

#917585 — Bug#907774: Bug#908567: libssl 1.1.1 TLS_MAX_VERSION ABI breakage

[Multipart message — attachments visible in raw view] — view raw

On Tue, 11 Sep 2018 at 09:00, Jan-Marek Glogowski <glogow@fbihome.de> wrote:

> Am 11.09.2018 um 11:57 schrieb Adrian Bunk:
>
>
> Qt5 is just the first breaking package - I have no idea, how many packages
> use TLS_MAX_VERSION in
> their code.


Only a handful according to
https://codesearch.debian.net/search?q=TLS_MAX_VERSION

[toc] | [prev] | [next] | [standalone]

#917603 — Bug#907774: [Pkg-openssl-devel] Bug#908567: Bug#908567: libssl 1.1.1 TLS_MAX_VERSION ABI breakage

On Tue, Sep 11, 2018 at 04:11:02PM +0300, Adrian Bunk wrote:
> 
> Dmitry already implemented my short-term workaround:
> https://tracker.debian.org/news/986618/accepted-qtbase-opensource-src-5111dfsg-8-source-into-unstable/

If this is for a call to SSL_CTX_set_max_proto_version(), you can
use 0 instead of TLS_MAX_VERSION.


Kurt

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.bugs.dist

csiph-web