Page MenuHomeFreeBSD

unbound: avoid calling deprecated OpenSSL function
ClosedPublic

Authored by emaste on May 30 2023, 9:42 PM.
Tags
None
Referenced Files
Unknown Object (File)
Sep 6 2025, 4:19 PM
Unknown Object (File)
Sep 3 2025, 2:33 PM
Unknown Object (File)
Aug 10 2025, 1:45 AM
Unknown Object (File)
Aug 9 2025, 7:38 PM
Unknown Object (File)
Jun 30 2025, 2:12 PM
Unknown Object (File)
Jun 28 2025, 6:54 PM
Unknown Object (File)
Jun 27 2025, 6:10 PM
Unknown Object (File)
Jun 22 2025, 8:01 PM
Subscribers

Details

Summary

SSL_CTX_set_ecdh_auto is deprecated and has no effect (for reference see https://github.com/openssl/openssl/commit/2ecb9f2d18614fb7b7b42830a358b7163ed43221).

As unbound's config.h is manually maintained just turn off HAVE_DECL_SSL_CTX_SET_ECDH_AUTO so that it won't be called.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

emaste created this revision.
emaste added a reviewer: ngie.

Sounds good to me! From https://www.openssl.org/docs/man3.1/man3/SSL_CTX_set_ecdh_auto.html :

SSL_CTX_set_ecdh_auto() and SSL_set_ecdh_auto() are deprecated and have no effect.

Oddly enough this function doesn't appear to be documented on 1.1..

This revision is now accepted and ready to land.May 30 2023, 11:10 PM