Page MenuHomePhabricator

qt: Revert "Force TLS1.0+ for SSL connections"
ClosedPublic

Authored by Fabien on Jan 14 2019, 13:40.

Details

Summary

Backport of core PR14403

This reverts commit 15e26a6a9afe299b9ca6fced73b876644365879b, whose
purpose was to tweak the Qt configuration to force TLS, i.e., to
disable SSLv3, in Qt versions >= 5.5. However, the default behavior
of Qt >= 5.4 is to disable SSLv3 anyway [1], so the configuration
tweak is redundant.

With Qt 5.11.2, the configuration tweak is not only redundant but in
fact provokes a deadlock (#14359) due to Qt 5.11.2 being incompatible
with OpenSSL 1.1.1 [2]. Since the deadlock occurs at the early startup
stage of bitcoin-qt, it renders bitcoin-qt entirely non-functional
when compiled against OpenSSL 1.1.1 and Qt 5.11.2 (and possible future
combinations of OpenSSL and Qt versions).

This fixes the issue of bitcoin-qt not launching in Archlinux (tested,
using QT 5.12).

Test Plan
make check
./src/qt/bitcoin-qt

Check the app launches and works as expected

Diff Detail

Repository
rABC Bitcoin ABC
Branch
PR14403
Lint
Lint Passed
Unit
No Test Coverage
Build Status
Buildable 4507
Build 7077: Bitcoin ABC Buildbot (legacy)
Build 7076: arc lint + arc unit