[squid-dev] OpenSSL 1.1 regression

Amos Jeffries squid3 at treenet.co.nz
Thu May 18 12:40:26 UTC 2017


On 18/05/17 23:12, Christos Tsantilas wrote:
> +    # check for API functions
> +    AC_CHECK_LIB(ssl, SSL_CTX_get0_certificate, [AC_DEFINE(HAVE_SSL_CTX_GET0_CERTIFICATE, 1, [SSL_CTX_get0_certificate is available])], [])
> +

This bit seems to be correct.

Given the .cc file sequence of macro tests I think we can speed up 
./configure a bit by moving the use of 
SQUID_CHECK_OPENSSL_GETCERTIFICATE_WORKS into the if-not-found [] path.

eg.

AC_CHECK_LIB(ssl, SSL_CTX_get0_certificate, [
   AC_DEFINE(HAVE_SSL_CTX_GET0_CERTIFICATE, 1, [SSL_CTX_get0_certificate is available])
   ],[
   # check for bugs and hacks in the old OpenSSL API
   SQUID_CHECK_OPENSSL_GETCERTIFICATE_WORKS
   ])


Amos



More information about the squid-dev mailing list