Minimum GnuTLS version for OpenConnect 7.08?

Mike Miller mtmiller at debian.org
Sat May 27 09:16:51 PDT 2017


On Sat, May 27, 2017 at 11:41:13 +0100, David Woodhouse wrote:
> On Fri, 2017-05-26 at 10:38 -0700, Daniel Lenski wrote:
> > David, Nikos,
> > 
> > Is there a known minimum version of GnuTLS needed to build
> > OpenConnect 7.08?
> > 
> > The web site does not specify any minimum versions of GnuTLS or
> > OpenSSL (http://www.infradead.org/openconnect/building.html) … but
> > I've been getting several issue reports on GitHub from people trying
> > to build openconnect-gp with old versions of GnuTLS (e.g.
> > https://github.com/dlenski/openconnect/issues/33). The build
> > requirements for the GP version are no different from the official
> > version.
> > 
> > It would be good to clarify the minimum library versions required if
> > they're easy to pin down.
> 
> Right now we still do support GnuTLS 2.12. I have no real objection to
> killing that, if Mike doesn't (which he didn't last time I asked).

I think the build error linked to suggests that we may not actually
support 2.12 now ('GNUTLS_E_TIMEDOUT' undeclared).

> It's just that we've never had a good reason to actually rip it out.

Debian and Ubuntu packages have been building with 3.2 and newer since
2014. GnuTLS 2.12 no longer exists in current releases, so I have no
objection to killing it.

It would be nice to document exactly what the actual minimum version
requirement is now. The oldest version I have readily available is
3.2.11, and it works.

-- 
mike



More information about the openconnect-devel mailing list