Code Monkey home page Code Monkey logo

Comments (21)

KaKi87 avatar KaKi87 commented on August 26, 2024 1

Windows 7 is deprecated and Ubuntu 18.04 is 3 years old, honestly I don't really care.

What I care more is about security (OpenSSL 1.0.x does not support TLS 1.3) and being able to create Tauri apps, this is going to be one of my most important occupations in my free time now.

I spent much time looking for non-Electron HTTP request clients, only found three :

I really need this to work, please. Willing to sponsor.

from frequest.

fabiobento512 avatar fabiobento512 commented on August 26, 2024 1

@markoong No progress but I know how to fix it. We need to upgrade the Qt version. For the current library to be picked up I don't have more instructions as I only used the ubuntu package manager (that installed it automatically for me).

I was thinking that maybe I can add travisci support to the project so builds across different operating systems can be made easily (without local machines). This though requires time, which I have not been spending on personal projects like this.

I will see if I can at least add travisci support and then upgrade the qt version (and consequently adding openssl 1.1.1 support). This would be nice. Maybe I could start with the Linux version which is the one that needs a more urgent update.

from frequest.

KaKi87 avatar KaKi87 commented on August 26, 2024 1

It works !
However, I would be most grateful if you could publish future versions with a non-zipped AppImage like the previous ones.
Thanks :)

from frequest.

KaKi87 avatar KaKi87 commented on August 26, 2024 1

Yes, turns out it is no longer the latest LTS :

Version 3.0 will be supported until 2026-09-07 (LTS).
Version 1.1.1 will be supported until 2023-09-11 (LTS).

(source)

Even if OpenSSL 1.1.1 still has more than a year of support remaining, I recommend supporting version 3.0, as other apps will do as well.

from frequest.

fabiobento512 avatar fabiobento512 commented on August 26, 2024 1

@KaKi87 Yes, I will. I need to check with Qt though, because that likely will require a Qt upgrade as well.

I will also look if it is possible to bundle the openssl libraries with the appimages to avoid this problem in the future.

from frequest.

fabiobento512 avatar fabiobento512 commented on August 26, 2024

Yes this a known issue.

Currently linuxdeployqt doesn't bundle OpenSSL, you need to install it by yourself.

Please see the instructions in the release page:
https://github.com/fabiobento512/FRequest/releases

Let me know if this helps.

from frequest.

fabiobento512 avatar fabiobento512 commented on August 26, 2024

Close due to no answer.

from frequest.

KaKi87 avatar KaKi87 commented on August 26, 2024

Hello,

I ran into the same issue and running sudo apt install libssl1.0-dev indeed solved the issue.

I look forward to have OpenSSL automatically bundled into the next version build for Linux.

Thanks for this awesome project, I was tired of choosing between Electron-based freemium apps.

If you ever need funding, ping me, and I'll be very happy to donate.

Thanks !

from frequest.

KaKi87 avatar KaKi87 commented on August 26, 2024

Hey @fabiobento512, if you can't bundle this dependency in the app, do you think you could make it compatible with libssl-dev instead of libssl1.0-dev ?

I'm developing apps using Tauri now and that one depends on libssl-dev, which version is currently 1.1.1f.

Thanks

from frequest.

fabiobento512 avatar fabiobento512 commented on August 26, 2024

@KaKi87 Thanks for offering for funding. I don't think it makes much sense now since there's not a huge user base? Besides I would need quite some funding to dedicate more of my free time to work on FRequest, 15€ or 30€ wouldn't do it.

At the moment we need to use libssl1.0-dev because Qt 5.10 is linking with OpenSSL 1.0.x. I am not sure if newer versions of Qt already link with 1.1.x, if that's the case we could theoretically upgrade the Qt version (and then it would work with libssl-dev), that would have some drawbacks like losing Windows 7 support and likely require a newer ubuntu as well as minimum requirements.

from frequest.

fabiobento512 avatar fabiobento512 commented on August 26, 2024

Thanks for the information @KaKi87 .

I wasn't aware of TLS 1.3, this indeed seems to be a big problem and as you said seems to be more important than Windows 7 or Ubuntu 18.04 support. We will most likely need to upgrade the macOS version.

Still this seems like it will take lot's of work (as toolchains and base operating systems will need to be updated).

I work in this program in my free time so this can take quite some time to complete.

From a quick search that I made seems that at least Qt 5.12.4 supports openSSL 1.1.1 which already supports TLS 1.3.

I send you an email regarding the sponsorship, as this can speed up the process.

from frequest.

markoong avatar markoong commented on August 26, 2024

Any progress on this? I'm currently using the Appimage on a linux distro which does not include ssl1.0 devel package and the only way to go would seems to compile ssl 1.0 dev.

Can you please provide more instructions where exactly the library has to be put for the app-image to pickup it ?

from frequest.

markoong avatar markoong commented on August 26, 2024

from frequest.

fabiobento512 avatar fabiobento512 commented on August 26, 2024

@markoong Only time issues.

from frequest.

fabiobento512 avatar fabiobento512 commented on August 26, 2024

@markoong I have upload a new version that should fix those openssl issues. Please check.

@KaKi87

from frequest.

fabiobento512 avatar fabiobento512 commented on August 26, 2024

That's great! Thanks for checking @KaKi87 . I zipped the appimage to make it consistent with the other os versions (also to include the readme and license files). I don't think it's a big issue, but let's see what others think.

from frequest.

KaKi87 avatar KaKi87 commented on August 26, 2024

Well, from an UX point of view, I think the release file should only contain what the software needs to actually run, especially considering the license is included in the software itself on Help > About.

from frequest.

KaKi87 avatar KaKi87 commented on August 26, 2024

Hello,

Since installing Linux Mint 21 (based on Ubuntu 22.04), I'm encountering the SSL handshake failed again, except error code is now 6.

openssl & libssl-dev version : 3.0.2-0ubuntu1.6

Thanks

from frequest.

fabiobento512 avatar fabiobento512 commented on August 26, 2024

@KaKi87

You need to install the openSSL 1.1.1 dev package for your distro. Have you searched for the right package for Mint 21? Ubuntu 22.04 libssl-dev seems to point to openSSL 3 which will not work.

Edit:
Maybe this works?
https://packages.ubuntu.com/focal/amd64/libssl1.1/download
(I don't think this will update automatically though)
I did a quick search and I couldn't find libssl-dev 1.1 for Ubuntu 22.04.

from frequest.

KaKi87 avatar KaKi87 commented on August 26, 2024

But, didn't you fix OpenSSL compatibility already ?

from frequest.

fabiobento512 avatar fabiobento512 commented on August 26, 2024

@KaKi87 I did and Ubuntu broke it apparently, because they stop supporting openSSL 1.1.1.

from frequest.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.