[PATCH] compat: Relax version check with OpenSSL 3.0+
rsbecker at nexbridge.com
rsbecker at nexbridge.com
Mon May 8 09:24:32 AEST 2023
On Sunday, May 7, 2023 7:08 PM, Darren Tucker wrote:
>On Mon, 8 May 2023 at 06:13, <rsbecker at nexbridge.com> wrote:
>[...]
>> Is this not already covered using the --without-openssl-header-check
>> configuration option?
>
>No. That configure option will disable the consistency check between the
headers
>and library versions at compile time, ie the API. It was added when some
vendors
>(from memory, Apple) started shipping libcrypto updates without the
corresponding
>header updates.
>
>This diff posted affects the check between the version it was compiled
against and
>the currently installed library version, ie the ABI.
>OpenSSL improved the ABI compatibility from "must be the same minor
release" in
>1.x to "must be the same major release" in 3.x but we currently only have
the 1.x
>checks. Damien had a slightly different diff that also fixed this, not
sure what
>happened to it.
Thanks, I understand better now.
--Randall
More information about the openssh-unix-dev
mailing list