Skip to content

Google Play incorrectly detects that tor is buit with OpenSSL 1.1.1b

So this is an issue we've had for a bit when deploying Tor Browser for Android. For now it's a non-fatal error in terms of publishing, but I imagine that could change in the future:

image

Link to Learn More - https://support.google.com/faqs/answer/12576638

Obviously we're not building with OpenSSl 1.1.1b and haven't for quite awhile. My best guess is that we're getting a false positive because of this warning string:

Detected OpenSSL bug 7712: disabling TLS 1.3 on future connections. A fix is expected to appear in OpenSSL 1.1.1b.

which lives in src/lib/tls/tortls_openssl.c

Would it be possible to remove the explicit 1.1.1b reference?

In the meantime I'll try patching our local tor build for the next alpha and see if that makes the error go awy.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information