[squid-dev] OpenSSL 1.1 regression

Alex Rousskov rousskov at measurement-factory.com
Wed May 17 16:56:15 UTC 2017


On 05/17/2017 10:35 AM, Christos Tsantilas wrote:
> +#if (OPENSSL_VERSION_NUMBER >= 0x10002000L)
> +    X509 * cert = SSL_CTX_get0_certificate(ctx.get());

If it is possible to replace this version check with a ./configure-time
detection of SSL_CTX_get0_certificate() availability, please do that.
Avoiding OPENSSL_VERSION_NUMBER macros in new code may help with future
support for LibreSSL and/or other libraries that lie about OpenSSL API
version they provide.

    http://bugs.squid-cache.org/show_bug.cgi?id=4662


Thank you,

Alex.



More information about the squid-dev mailing list