OpenSSL dependency update

[George Staikos]

On Tuesday 14 March 2006 01:28, Brad Hards wrote:
> On Monday 13 March 2006 20:55 pm, George Staikos wrote:
> > On Sunday 12 March 2006 05:03, Brad Hards wrote:
> > > On Friday 10 March 2006 01:14 am, George Staikos wrote:
> > > > For KDE 4 I would like to start requiring a minimum of OpenSSL 0.9.9.
> > > > This is for several reasons, but most importantly:
> > > > 1) Support of the servername extension
> > >
> > > This is from RFC3546, right?
> >
> >   Something like that.  I am offline right now so I can't check, but it
> > sounds right.
>
> I'll take a look. Doesn't seem too hard - gnutls can do it, and I think NSS
> can do it too. Any other extensions from RFC3546 that are important to you?

   I guess 3.6 is TLS stapling support.  We definitely need to support that.

> I do have one more question. Is SSLv2 important to you? Any objections to
> not supporting it at all (i.e. never used, no access to it) in QCA? I'm
> liking the idea of only doing SSLv3, TLS and DTLS, but if there is a need
> we can keep SSLv2.

  I already removed it from trunk. :-)

-- 
George Staikos
KDE Developer				http://www.kde.org/
Staikos Computing Services Inc.		http://www.staikos.net/