[QGIS-Developer] OSGeo4W Qt and OpenSSL versions

[Larry Shaffer]

Hi,

Comment mostly for Jürgen (and Windows devs/users)...

I recommend OSGeo4W's Qt packages be updated to 5.12.4 or latest LTR,
specifically for this OpenSSL v1.1.1 reason:
https://www.qt.io/blog/2019/06/17/qt-5-12-4-released-support-openssl-1-1-1

I think it is a security concern to rely upon an OpenSSL version that is 3+
years old, as is the case with official Qt < 5.12.4 releases. For one
example, there is no TLS 1.3 support in OpenSSL 1.0.2.

Regards,

Larry Shaffer
Dakota Cartography
Black Hills, South Dakota
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/qgis-developer/attachments/20200414/5ed88dec/attachment.html>