Page MenuHomeFreeBSD

openssh: Request the OpenSSL 1.1 API
ClosedPublic

Authored by jlduran on Wed, Mar 26, 11:42 AM.
Tags
None
Referenced Files
Unknown Object (File)
Mon, Apr 14, 10:59 PM
Unknown Object (File)
Thu, Apr 10, 1:43 PM
Unknown Object (File)
Thu, Apr 10, 8:00 AM
Unknown Object (File)
Wed, Apr 9, 5:23 AM
Unknown Object (File)
Wed, Apr 9, 5:23 AM
Unknown Object (File)
Wed, Apr 9, 5:23 AM
Unknown Object (File)
Wed, Apr 9, 5:22 AM
Unknown Object (File)
Sun, Apr 6, 2:25 AM
Subscribers

Details

Summary

Upstream OpenSSH commit f51423bda ("request 1.1x API compatibility for
OpenSSL >=3.x") requests OPENSSL_API_COMPAT version 0x10100000L (OpenSSL
1.1.0), in order to avoid warnings about deprecated functions.

Do the same here, to avoid getting those warnings.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

What do you think of just adding it in secure/ssh.mk?

What do you think of just adding it in secure/ssh.mk?

Yes, that was my first attempt, I thought requesting the API only where needed would be preferred. Thinking about it, it should apply to the entire OpenSSH, so better do it in secure/ssh.mk.
Will change it!

I thought requesting the API only where needed would be preferred.

This was my thinking early on for these sorts of things as well, but doing it as in your updated diff is both simpler and safer. I think the only downside will be the somewhat longer compiler command lines (when looking at logs etc.)

This revision is now accepted and ready to land.Wed, Mar 26, 2:00 PM
This revision was automatically updated to reflect the committed changes.