[PATCH] compat: Relax version check with OpenSSL 3.0+

rsbecker at nexbridge.com rsbecker at nexbridge.com
Mon May 8 09:24:32 AEST 2023


On Sunday, May 7, 2023 7:08 PM, Darren Tucker wrote:
>On Mon, 8 May 2023 at 06:13, <rsbecker at nexbridge.com> wrote:
>[...]
>> Is this not already covered using the --without-openssl-header-check
>> configuration option?
>
>No.  That configure option will disable the consistency check between the
headers
>and library versions at compile time, ie the API.  It was added when some
vendors
>(from memory, Apple) started shipping libcrypto updates without the
corresponding
>header updates.
>
>This diff posted affects the check between the version it was compiled
against and
>the currently installed library version, ie the ABI.
>OpenSSL improved the ABI compatibility from "must be the same minor
release" in
>1.x to "must be the same major release" in 3.x but we currently only have
the 1.x
>checks.  Damien had a slightly different diff that also fixed this, not
sure what
>happened to it.

Thanks, I understand better now.
--Randall



More information about the openssh-unix-dev mailing list