[asterisk-bugs] [JIRA] (ASTERISK-27874) [patch] tcptls: Allow OpenSSL 1.1.x configured with enable-ssl3-method no-deprecated.

Friendly Automation (JIRA) noreply at issues.asterisk.org
Tue Jun 5 13:02:54 CDT 2018


    [ https://issues.asterisk.org/jira/browse/ASTERISK-27874?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=243704#comment-243704 ] 

Friendly Automation commented on ASTERISK-27874:
------------------------------------------------

Change 9051 merged by George Joseph:
tcptls: Allow OpenSSL 1.1.x configured with enable-ssl3-method no-deprecated.

[https://gerrit.asterisk.org/9051|https://gerrit.asterisk.org/9051]

> [patch] tcptls: Allow OpenSSL 1.1.x configured with enable-ssl3-method no-deprecated.
> -------------------------------------------------------------------------------------
>
>                 Key: ASTERISK-27874
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-27874
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Core/General
>    Affects Versions: 13.21.0, 15.4.0
>            Reporter: Alexander Traud
>            Assignee: Alexander Traud
>              Labels: patch
>         Attachments: 13_extra_defined.patch, 15_extra_defined.patch
>
>
> OpenSSL can be configured (and then built) in various combinations. The _easiest_ (?) way to find the relevant configuration, is to look-up each used symbol and check the surrounding Defines in the header file of OpenSSL. If one of the guards is missing (or is a combination of several ones) and OpenSSL was built with that, Asterisk is not going to compile.
> {{SSLv3_client_method()}} is guarded by {{OPENSSL_NO_SSL3_METHOD}} and {{OPEN_API_COMPAT}}. Consequently, Asterisk does not build, if a OpenSSL 1.1.x was built via {code}./config enable-ssl3-method no-deprecated
> make{code}The attached patch fixes this. Additionally, that patch removes {{defined(OPENSSL_VERSION_NUMBER)}} because that is a left-over from commit [2c8d076|https://github.com/asterisk/asterisk/commit/2c8d0764de87037ce52656e13b36de5d9876aeaa]. Finally, the patch moves {{LIBRESSL_VERSION_NUMBER}} to first position because LibreSSL changed its {{OPENSSL_VERSION_NUMBER}} several times.



--
This message was sent by Atlassian JIRA
(v6.2#6252)



More information about the asterisk-bugs mailing list