[squid-dev] OpenSSL 1.1 regression

Amos Jeffries squid3 at treenet.co.nz
Tue May 16 12:04:21 UTC 2017


Building Squid-5 r15136 against the latest libssl 1.1.0e on Ubuntu.

src/ssl/support.cc: In function ‘bool 
Ssl::verifySslCertificate(Security::ContextPointer&, const 
Ssl::CertificateProperties&)’:

src/ssl/support.cc:995:34: error: invalid use of incomplete type ‘struct 
ssl_ctx_st’
      X509 ***pCert = (X509 ***)ctx->cert;


Should I just update this hack code to use the 
X509_STORE_CTX_get0_cert() getter ?

or is this a sign of a deeper bug with the 
SQUID_USE_SSLGETCERTIFICATE_HACK autoconf test that needs to be fixed?


Amos




More information about the squid-dev mailing list