[squid-dev] OpenSSL 1.1 regression

[Alex Rousskov]

On 05/17/2017 10:35 AM, Christos Tsantilas wrote:
> +#if (OPENSSL_VERSION_NUMBER >= 0x10002000L)
> +    X509 * cert = SSL_CTX_get0_certificate(ctx.get());

If it is possible to replace this version check with a ./configure-time
detection of SSL_CTX_get0_certificate() availability, please do that.
Avoiding OPENSSL_VERSION_NUMBER macros in new code may help with future
support for LibreSSL and/or other libraries that lie about OpenSSL API
version they provide.

    http://bugs.squid-cache.org/show_bug.cgi?id=4662


Thank you,

Alex.