[asterisk-bugs] [JIRA] (ASTERISK-25043) [patch] Avoiding ERR_remove_state in OpenSSL

[Rusty Newton (JIRA)]

     [ https://issues.asterisk.org/jira/browse/ASTERISK-25043?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Rusty Newton updated ASTERISK-25043:
------------------------------------

    Status: Open  (was: Triage)

> [patch] Avoiding ERR_remove_state in OpenSSL
> --------------------------------------------
>
>                 Key: ASTERISK-25043
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-25043
>             Project: Asterisk
>          Issue Type: Improvement
>      Security Level: None
>          Components: Channels/chan_sip/TCP-TLS
>    Affects Versions: SVN
>            Reporter: Alexander Traud
>            Severity: Minor
>         Attachments: asterisk_with_BoringSSL.patch
>
>
> Since OpenSSL 1.0.0, the symbol _ERR_remove_state_ is [deprecated|https://www.openssl.org/docs/crypto/ERR_remove_state.html]. Already, some forks of OpenSSL do not ship with that symbol anymore and compiling fails (sometimes linking fails, sometimes fail at runtime).
> The same with _ERR_load_SSL_strings_ which is called by {{SSL_load_error_strings}}, since OpenSSL 0.9.6 (or even earlier). _ERR_load_BIO_strings_ is called by _ERR_load_crypto_strings_ which is called by _ERR_load_SSL_strings_, again since 0.9.6 or even earlier. Consequently, these calls can be removed without any side effects.
> This patch was tested with BoringSSL (2311) on Ubuntu (14.04.2 LTS):
> {noformat}sudo apt-get install cmake git golang-go
> cd /usr/src/
> git clone https://boringssl.googlesource.com/boringssl
> cd boringssl/
> cmake -DBUILD_SHARED_LIBS=1 ./
> make
> cp ./crypto/libcrypto.so ./
> cp ./ssl/libssl.so ./
> cd /usr/src/asterisk*
> make distclean
> LDFLAGS='-Wl,-rpath /usr/src/boringssl' ./configure --with-ssl='/usr/src/boringssl'
> make
> sudo make install{noformat}



--
This message was sent by Atlassian JIRA
(v6.2#6252)