diff options
| author | rhe <rhe@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2016-06-07 05:57:25 +0000 |
|---|---|---|
| committer | rhe <rhe@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2016-06-07 05:57:25 +0000 |
| commit | 74c38e5d9cd7efe904f7cb99b047f386c5d46581 (patch) | |
| tree | aee7e9ad37c510845d8869a236c4d43a26ea3e32 /ext/openssl/extconf.rb | |
| parent | 04e1badd381297a92e9fc7fb3877f9b0305809a7 (diff) | |
openssl: avoid deprecated version-specific ssl methods if necessary
* ext/openssl/extconf.rb: Check for SSL_CTX_set_min_proto_version()
macro added in OpenSSL 1.1.0. Version-specific methods, such as
TLSv1_method(), are deprecated in OpenSSL 1.1.0. We need to use
version-flexible methods (TLS_*method() or SSLv23_*method()) and
disable other protocol versions as necessary.
[ruby-core:75225] [Feature #12324]
* ext/openssl/ossl_ssl.c: Use SSL_CTX_set_{min,max}_proto_version() to
fix the protocol version.
git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@55304 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
Diffstat (limited to 'ext/openssl/extconf.rb')
| -rw-r--r-- | ext/openssl/extconf.rb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/ext/openssl/extconf.rb b/ext/openssl/extconf.rb index a74774c761..f5a6d8e87c 100644 --- a/ext/openssl/extconf.rb +++ b/ext/openssl/extconf.rb @@ -145,6 +145,7 @@ have_func("X509_STORE_up_ref") have_func("SSL_SESSION_up_ref") have_func("EVP_PKEY_up_ref") OpenSSL.check_func_or_macro("SSL_CTX_set_tmp_ecdh_callback", "openssl/ssl.h") # removed +OpenSSL.check_func_or_macro("SSL_CTX_set_min_proto_version", "openssl/ssl.h") Logging::message "=== Checking done. ===\n" |