On Wed, Jul 19, 2017 at 1:52 PM, Nikos Mavrogianopoulos <n.mavrogiannopoulos at gmail.com> wrote: > On July 19, 2017 8:04:20 PM GMT+02:00, David Woodhouse <dwmw2 at infradead.org> wrote: >> >> On Wed, 2017-07-19 at 10:47 -0700, Daniel Lenski wrote: >>> >>> + <ul> >>> + <li>Recent versions of OpenConnect require GnuTLS v3.2 or >>> newer.</li> >>> + </ul></li> >> >> >> If we're going to do that then at the very least we should update the >> pkg-config check in configure.ac accordingly. And there's a bunch of >> actual code to support 2.12 still, which we can rip out. >> >> Or it's probably actually a fairly minimal patch to fix it up to build >> again. >> >> However little work it is, I'm certainly not averse to this being the >> last straw for killing 2.x support ? I've been threatening that for >> ages anyway. I hadn't necessarily planned to go all the way to 3.2 >> though. What platforms do we leave behind if we do *that*? Nikos? > > I do not know if 3.0 or 3.1 are available in any still supported os (not rhel at least). I'd be surprised though if anyone still supports these. > > Does that mean? go ahead and change the patch to make configure.ac reject anything older than GnuTLS 3.2? :-D I think this is the right place for it: http://git.infradead.org/users/dwmw2/openconnect.git/blob/HEAD:/configure.ac#l280 -Dan
