{"action":"created","issue":{"url":"https://api.github.com/repos/bitcoin/bitcoin/issues/6384","labels_url":"https://api.github.com/repos/bitcoin/bitcoin/issues/6384/labels{/name}","comments_url":"https://api.github.com/repos/bitcoin/bitcoin/issues/6384/comments","events_url":"https://api.github.com/repos/bitcoin/bitcoin/issues/6384/events","html_url":"https://github.com/bitcoin/bitcoin/pull/6384","id":93339923,"number":6384,"title":"qt: Force TLS1.0+ for SSL connections","user":{"login":"laanwj","id":126646,"avatar_url":"https://avatars.githubusercontent.com/u/126646?v=3","gravatar_id":"","url":"https://api.github.com/users/laanwj","html_url":"https://github.com/laanwj","followers_url":"https://api.github.com/users/laanwj/followers","following_url":"https://api.github.com/users/laanwj/following{/other_user}","gists_url":"https://api.github.com/users/laanwj/gists{/gist_id}","starred_url":"https://api.github.com/users/laanwj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/laanwj/subscriptions","organizations_url":"https://api.github.com/users/laanwj/orgs","repos_url":"https://api.github.com/users/laanwj/repos","events_url":"https://api.github.com/users/laanwj/events{/privacy}","received_events_url":"https://api.github.com/users/laanwj/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/bitcoin/bitcoin/labels/GUI","name":"GUI","color":"02d7e1"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-07-06T18:11:45Z","updated_at":"2015-07-07T07:40:34Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/bitcoin/bitcoin/pulls/6384","html_url":"https://github.com/bitcoin/bitcoin/pull/6384","diff_url":"https://github.com/bitcoin/bitcoin/pull/6384.diff","patch_url":"https://github.com/bitcoin/bitcoin/pull/6384.patch"},"body":"I recently got a notification that my suggestion for a flag to force TLS has been implemented and will be in Qt 5.5.0: https://bugreports.qt.io/browse/QTBUG-43168\r\n\r\nBecause of the POODLE attack it is recommended to disable SSLv3 (https://disablessl3.com/).\r\n\r\nSo on Qt 5.5.0+ set the flag in the default QSslConfiguration (used for payment requests) to require SSL protocols TLS1.0+.\r\n\r\nNote: do not merge yet, I've not been able to test this yet on an actual Qt 5.5 install"},"comment":{"url":"https://api.github.com/repos/bitcoin/bitcoin/issues/comments/119105489","html_url":"https://github.com/bitcoin/bitcoin/pull/6384#issuecomment-119105489","issue_url":"https://api.github.com/repos/bitcoin/bitcoin/issues/6384","id":119105489,"user":{"login":"laanwj","id":126646,"avatar_url":"https://avatars.githubusercontent.com/u/126646?v=3","gravatar_id":"","url":"https://api.github.com/users/laanwj","html_url":"https://github.com/laanwj","followers_url":"https://api.github.com/users/laanwj/followers","following_url":"https://api.github.com/users/laanwj/following{/other_user}","gists_url":"https://api.github.com/users/laanwj/gists{/gist_id}","starred_url":"https://api.github.com/users/laanwj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/laanwj/subscriptions","organizations_url":"https://api.github.com/users/laanwj/orgs","repos_url":"https://api.github.com/users/laanwj/repos","events_url":"https://api.github.com/users/laanwj/events{/privacy}","received_events_url":"https://api.github.com/users/laanwj/received_events","type":"User","site_admin":false},"created_at":"2015-07-07T07:40:34Z","updated_at":"2015-07-07T07:40:34Z","body":"Thanks for the extensive testing, @Diapolo!\r\n\r\nWith regard to SSL in RPC, this was already solved in #5434:\r\n```c++\r\nrpc_ssl_context->set_options(ssl::context::no_sslv2 | ssl::context::no_sslv3);\r\n```"}}