Page MenuHomeFreeBSD

unbound: avoid calling deprecated OpenSSL function
ClosedPublic

Authored by emaste on May 30 2023, 9:42 PM.
Tags
None
Referenced Files
Unknown Object (File)
Mon, Oct 21, 12:35 AM
Unknown Object (File)
Sun, Oct 20, 3:41 AM
Unknown Object (File)
Sun, Oct 20, 3:41 AM
Unknown Object (File)
Sun, Oct 20, 3:41 AM
Unknown Object (File)
Sun, Oct 20, 3:22 AM
Unknown Object (File)
Fri, Oct 11, 1:53 PM
Unknown Object (File)
Sep 14 2024, 8:29 AM
Unknown Object (File)
Sep 6 2024, 6:26 PM
Subscribers

Details

Summary

SSL_CTX_set_ecdh_auto is deprecated and has no effect (for reference see https://github.com/openssl/openssl/commit/2ecb9f2d18614fb7b7b42830a358b7163ed43221).

As unbound's config.h is manually maintained just turn off HAVE_DECL_SSL_CTX_SET_ECDH_AUTO so that it won't be called.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

emaste created this revision.
emaste added a reviewer: ngie.

Sounds good to me! From https://www.openssl.org/docs/man3.1/man3/SSL_CTX_set_ecdh_auto.html :

SSL_CTX_set_ecdh_auto() and SSL_set_ecdh_auto() are deprecated and have no effect.

Oddly enough this function doesn't appear to be documented on 1.1..

This revision is now accepted and ready to land.May 30 2023, 11:10 PM