Page MenuHomeFreeBSD

unbound: avoid calling deprecated OpenSSL function
ClosedPublic

Authored by emaste on May 30 2023, 9:42 PM.
Tags
None
Referenced Files
Unknown Object (File)
Tue, Apr 16, 10:20 AM
Unknown Object (File)
Tue, Apr 16, 5:43 AM
Unknown Object (File)
Mar 16 2024, 12:05 AM
Unknown Object (File)
Mar 16 2024, 12:05 AM
Unknown Object (File)
Mar 16 2024, 12:05 AM
Unknown Object (File)
Mar 12 2024, 4:18 AM
Unknown Object (File)
Jan 26 2024, 6:10 PM
Unknown Object (File)
Dec 20 2023, 3:29 AM
Subscribers

Details

Summary

SSL_CTX_set_ecdh_auto is deprecated and has no effect (for reference see https://github.com/openssl/openssl/commit/2ecb9f2d18614fb7b7b42830a358b7163ed43221).

As unbound's config.h is manually maintained just turn off HAVE_DECL_SSL_CTX_SET_ECDH_AUTO so that it won't be called.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

emaste created this revision.
emaste added a reviewer: ngie.

Sounds good to me! From https://www.openssl.org/docs/man3.1/man3/SSL_CTX_set_ecdh_auto.html :

SSL_CTX_set_ecdh_auto() and SSL_set_ecdh_auto() are deprecated and have no effect.

Oddly enough this function doesn't appear to be documented on 1.1..

This revision is now accepted and ready to land.May 30 2023, 11:10 PM