Bug#871427: argyll: please switch to SSLv23_… or TLS_…_method

2017-10-13 Thread Sebastian Andrzej Siewior
On 2017-10-12 09:40:08 [-0400], Jeremy Bicha wrote: > I was wrong in my last email. > > But…SSLv23_client_method() is deprecated according to the manpage. Use > TLS_client_method() instead. This is what I suggested with the ifdef around to be able to work with older openssl if the change goes ups

Bug#871427: argyll: please switch to SSLv23_… or TLS_…_method

2017-10-12 Thread Jeremy Bicha
On Thu, Oct 12, 2017 at 3:02 AM, Sebastian Andrzej Siewior wrote: > What is the problem? Looking at 0130_openssl.patch it is okay. > SSLv23_client_method() tries _any_ possible version starting with TLS1.2 > as of today and if that fails it (would) try a lower version. > SSLv2 and SSLv3 is not not

Bug#871427: argyll: please switch to SSLv23_… or TLS_…_method

2017-10-12 Thread Sebastian Andrzej Siewior
On 2017-10-11 21:10:20 [-0400], Jeremy Bicha wrote: > Control: reopen -1 > > I'm reopening this bug because I think you picked the wrong choice here. > > SSLv2 and SSLv3 are deprecated and not recommended. > > Please use TLS 1.2 instead unless you have a good reason not to. What is the problem?

Bug#871427: argyll: please switch to SSLv23_… or TLS_…_method

2017-10-11 Thread Jeremy Bicha
Control: reopen -1 I'm reopening this bug because I think you picked the wrong choice here. SSLv2 and SSLv3 are deprecated and not recommended. Please use TLS 1.2 instead unless you have a good reason not to. Thanks, Jeremy Bicha

Bug#871427: argyll: please switch to SSLv23_… or TLS_…_method

2017-08-07 Thread Sebastian Andrzej Siewior
Package: argyll Version: 1.9.2+repack-1 Severity: important User: pkg-openssl-de...@lists.alioth.debian.org Usertags: TLS1.0_1.1_removal Your packages uses a function which requests a TLS1.0 and/or TLS1.1 only connection. Since openssl 1.1.0f-4 (currently in unstable) this means won't work because