[PATCH] specify minimum required version of GnuTLS

Daniel Lenski dlenski at gmail.com
Thu Jul 20 18:08:17 PDT 2017


On Wed, Jul 19, 2017 at 1:52 PM, Nikos Mavrogianopoulos
<n.mavrogiannopoulos at gmail.com> wrote:
> On July 19, 2017 8:04:20 PM GMT+02:00, David Woodhouse <dwmw2 at infradead.org> wrote:
>>
>> On Wed, 2017-07-19 at 10:47 -0700, Daniel Lenski wrote:
>>>
>>>  +  <ul>
>>>  +  <li>Recent versions of OpenConnect require GnuTLS v3.2 or
>>>  newer.</li>
>>>  +  </ul></li>
>>
>>
>> If we're going to do that then at the very least we should update the
>> pkg-config check in configure.ac accordingly. And there's a bunch of
>> actual code to support 2.12 still, which we can rip out.
>>
>> Or it's probably actually a fairly minimal patch to fix it up to build
>> again.
>>
>> However little work it is, I'm certainly not averse to this being the
>> last straw for killing 2.x support — I've been threatening that for
>> ages anyway. I hadn't necessarily planned to go all the way to 3.2
>> though. What platforms do we leave behind if we do *that*? Nikos?
>
> I do not know if 3.0 or 3.1 are available in any still supported os (not rhel at least). I'd be surprised though if anyone still supports these.
>
>

Does that mean… go ahead and change the patch to make configure.ac
reject anything older than GnuTLS 3.2? :-D

I think this is the right place for it:
http://git.infradead.org/users/dwmw2/openconnect.git/blob/HEAD:/configure.ac#l280

-Dan



More information about the openconnect-devel mailing list