On Wed, Jul 19, 2017 at 11:04 AM, David Woodhouse <dwmw2 at infradead.org> wrote: > On Wed, 2017-07-19 at 10:47 -0700, Daniel Lenski wrote: >> + <ul> >> + <li>Recent versions of OpenConnect require GnuTLS v3.2 or >> newer.</li> >> + </ul></li> > > If we're going to do that then at the very least we should update the > pkg-config check in configure.ac accordingly. And there's a bunch of > actual code to support 2.12 still, which we can rip out. > > Or it's probably actually a fairly minimal patch to fix it up to build > again. Right? I haven't actually looked into what's needed to get past GNUTLS_E_TIMEDOUT not being defined, which is the currently most-pressing impediment to building with 2.12. I've just been telling people that they need to upgrade to 3.2 in order to build OpenConnect. > However little work it is, I'm certainly not averse to this being the > last straw for killing 2.x support ? I've been threatening that for > ages anyway. I hadn't necessarily planned to go all the way to 3.2 > though. What platforms do we leave behind if we do *that*? Nikos? My guess is that not very many people have been trying to build recent official versions with GnuTLS 2.12? since I see many fewer questions about this on the official mailing list than on https://github.com/dlenski/openconnect/issues :-D -Dan
