Page MenuHomeFreeBSD

unbound: avoid calling deprecated OpenSSL function
ClosedPublic

Authored by emaste on May 30 2023, 9:42 PM.
Tags
None
Referenced Files
Unknown Object (File)
Wed, Dec 4, 11:58 PM
Unknown Object (File)
Nov 25 2024, 11:15 PM
Unknown Object (File)
Nov 17 2024, 1:59 AM
Unknown Object (File)
Nov 6 2024, 8:56 AM
Unknown Object (File)
Nov 6 2024, 8:36 AM
Unknown Object (File)
Nov 6 2024, 6:28 AM
Unknown Object (File)
Oct 21 2024, 12:35 AM
Unknown Object (File)
Oct 20 2024, 3:41 AM
Subscribers

Details

Summary

SSL_CTX_set_ecdh_auto is deprecated and has no effect (for reference see https://github.com/openssl/openssl/commit/2ecb9f2d18614fb7b7b42830a358b7163ed43221).

As unbound's config.h is manually maintained just turn off HAVE_DECL_SSL_CTX_SET_ECDH_AUTO so that it won't be called.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

emaste created this revision.
emaste added a reviewer: ngie.

Sounds good to me! From https://www.openssl.org/docs/man3.1/man3/SSL_CTX_set_ecdh_auto.html :

SSL_CTX_set_ecdh_auto() and SSL_set_ecdh_auto() are deprecated and have no effect.

Oddly enough this function doesn't appear to be documented on 1.1..

This revision is now accepted and ready to land.May 30 2023, 11:10 PM