orbea - (cb73e60a) at 15 May 19:52
orbea - (387e516a) at 02 May 18:24
ITS#10039 Test for SSL_CTX_set_ciphersuites()
... and 6 more commits
The commit msg must have the ITS# in front, same as every other commit.
Corrected, I should have been more observant.
orbea - (3aa21d40) at 14 Apr 02:11
ITS#10039 Test for SSL_CTX_set_ciphersuites()
This is the new version of the previously closed MR !612 which I am reopening as explained in the bug tracker.
https://bugs.openldap.org/show_bug.cgi?id=10039#c7
When configuring OpenLDAP using --with-tls=openssl
with LibreSSL the configure will fail to detect SSL_export_keyring_material_early()
since LibreSSL doesn't support this function yet. However OpenLDAP doesn't actually use this function and only checks for it to ensure a modern OpenSSL API is used. This can be easily solved by checking for an equivalent modern OpenSSL function which both LibreSSL and OpenSSL both
support such as SSL_CTX_set_ciphersuites()
. Doing this allows the build and tests to succeed with modern LibreSSL versions. This was tested with LibreSSL >= 3.6.
orbea - (927b0559) at 12 Apr 21:02
configure.ac: Test for SSL_CTX_set_ciphersuites()
orbea - (4e935eb3) at 12 Apr 21:01
configure.ac: Test for SSL_CTX_set_ciphersuites()
orbea - (4bd14c62) at 12 Apr 20:59
configure.ac: Test for SSL_CTX_set_ciphersuites()
When configuring OpenLDAP using --with-tls=openssl
with LibreSSL the configure will fail to detect SSL_export_keying_material_early
since LibreSSL doesn't support this function yet. However OpenLDAP doesn't actually use this function so this can be easily solved by checking for SSL_library_init
which is a more standard function which both OpenSSL and LibreSSL support which OpenLDAP actually uses in libraries/libldap/tls_o.c
.
orbea - (e083e86f) at 09 Apr 22:35
configure.ac: Test for SSL_library_init
orbea - (2227e79e) at 09 Apr 22:35
configure.ac: Test for SSL_library_init