Mercurial > hg > nginx
comparison src/event/ngx_event_openssl_stapling.c @ 9200:ee40e2b1d083
SSL: reasonable version for LibreSSL adjusted.
OPENSSL_VERSION_NUMBER is now redefined to 0x1010000fL for LibreSSL 3.5.0
and above. Building with older LibreSSL versions, such as 2.8.0, may now
produce warnings (see cab37803ebb3) and may require appropriate compiler
options to suppress them.
Notably, this allows to start using SSL_get0_verified_chain() appeared
in OpenSSL 1.1.0 and LibreSSL 3.5.0, without additional macro tests.
Prodded by Ilya Shipitsin.
author | Sergey Kandaurov <pluknet@nginx.com> |
---|---|
date | Mon, 25 Dec 2023 21:15:48 +0400 |
parents | a46fcf101cfc |
children |
comparison
equal
deleted
inserted
replaced
9199:875cd36b8617 | 9200:ee40e2b1d083 |
---|---|
891 | 891 |
892 ocsp->status = NGX_AGAIN; | 892 ocsp->status = NGX_AGAIN; |
893 ocsp->cert_status = V_OCSP_CERTSTATUS_GOOD; | 893 ocsp->cert_status = V_OCSP_CERTSTATUS_GOOD; |
894 ocsp->conf = ocf; | 894 ocsp->conf = ocf; |
895 | 895 |
896 #if (OPENSSL_VERSION_NUMBER >= 0x10100000L && !defined LIBRESSL_VERSION_NUMBER) | 896 #if OPENSSL_VERSION_NUMBER >= 0x10100000L |
897 | 897 |
898 ocsp->certs = SSL_get0_verified_chain(c->ssl->connection); | 898 ocsp->certs = SSL_get0_verified_chain(c->ssl->connection); |
899 | 899 |
900 if (ocsp->certs) { | 900 if (ocsp->certs) { |
901 ocsp->certs = X509_chain_up_ref(ocsp->certs); | 901 ocsp->certs = X509_chain_up_ref(ocsp->certs); |