Build windows wallet with newer openssl version

[nathanielcwm]

I noticed in the debug info that it looks like the openssl version the windows wallet uses is 1.0.1 which hasn't been supported since December 31, 2016

[nathanielcwm]

This is the windows testnet version 4.0.2.1 btw

[barton2526]

Recommend upgrading to 1.0.2 to reduce risk of losing features:

https://www.openssl.org/news/cl102.txt

[barton2526]

Related? #185

[jamescowens]

@cyrossignal and I have been working on this. I would like to move directly to 1.1.0 if we can make that happen. IIRC cycy was able to get 1.1.0 to compile for the daemon, but there were some issues with Qt.

Note that this is the depends build path we are talking about.

The brew path, which dynamically links with the op sys version of SSL, already works fine with 1.1.0.

[cyrossignol]

As @jamescowens said, Qt 5.7 and 5.9 (in the current depends) don't seem to play well the newer OpenSSL versions.

I tested two new build paths:

• OpenSSL 1.1.0j with Qt 5.11 (support for both ends this year)
• OpenSSL 1.1.1b (LTS) with Qt 5.12 (LTS)

I'm guessing that we prefer the newer, LTS versions. Both work fine for the daemon. I'm currently paused at resolving the Qt depends patches, but it looks promising otherwise.

[jamescowens]

We are going to keep this on pause till we get Denise out the door. I am not really that concerned about the lack of support for 1.01k in the short term.

[nathanielcwm]

For reference here are the vulnerabilities affecting openssl versions of 1.0.1https://www.openssl.org/news/vulnerabilities-1.0.1.html

Vulnerabilites before CVE-2015-0206 are not applicable to 1.0.1k

[RoboticMind]

Is this still applicable to 4.0.4?

[cyrossignol]

@RoboticMind Yep. Will try to upgrade for Elizabeth.

[iFoggz]

https://www.qt.io/blog/2019/06/17/qt-5-12-4-released-support-openssl-1-1-1