How many of you are still shipping OpenSSL 1.1 with Qt 5.15?

[Jan Grulich]

Hi,

Troy is right, we are most likely not going to update Qt in RHEL 8 and it's
going to
stay on Qt 5.15.3.  I don't see OpenSSL 3.x available on RHEL 8 (maybe I'm
looking
wrong) so in case we update Qt there, I can just simply revert this patch.
We are
for sure going to maintain OpenSSL 1.1 for RHEL 8 so keeping Qt built with
it is not
a problem.

Regards,
Jan

čt 30. 11. 2023 v 18:58 odesílatel Troy Dawson <tdawson at redhat.com> napsal:

> I'll let Jan give a more authoritative answer, but RHEL 8 is in
> maintenance mode.
> Meaning that qt5-qtbase is staying at the version it is currently at, and
> it is only getting security fixes that are backported.
> Thus, this shouldn't affect RHEL 8, and as a consequence KDE in EPEL8.
>
> Also, RHEL 8 does have openssl3, so if things get to the point that it
> needs to use openssl3, it can be done.
>
> But again, Jan knows more than I do about this.  I'll let him answer.
>
> Troy
>
> On Thu, Nov 30, 2023 at 8:25 AM Neal Gompa <ngompa13 at gmail.com> wrote:
>
>> On Thu, Nov 30, 2023 at 9:20 AM Albert Astals Cid <aacid at kde.org> wrote:
>> >
>> > OpenSSL 1.1 reached EOL last September.
>> >
>> > There's this patch that would remove OpenSSL 1.1 support from Qt 5.15
>> >
>> >
>> https://invent.kde.org/qt/qt/qtbase/-/commit/d201c0a2184881a226bce76528047707e9062856
>> >
>> > For how many distros would this be a problem?
>> >
>>
>> This would be a problem for Qt 5.15 and KDE Plasma maintenance on
>> RHEL/CentOS 8 done by Jan Grulich and Troy Dawson. I would prefer to
>> not have it broken if possible.
>>
>>
>> --
>> 真実はいつも一つ！/ Always, there's only one truth!
>>
>>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kde.org/pipermail/distributions/attachments/20231201/75cec866/attachment-0001.htm>