Welcome! Log In Create A New Profile

Advanced

[nginx] SSL: SSL_get_peer_certificate() is deprecated in OpenSSL 3.0.

Maxim Dounin
November 16, 2021 09:54AM
details: https://hg.nginx.org/nginx/rev/c7c6a87c068d
branches: stable-1.20
changeset: 7961:c7c6a87c068d
user: Sergey Kandaurov <pluknet@nginx.com>
date: Tue Aug 10 23:43:16 2021 +0300
description:
SSL: SSL_get_peer_certificate() is deprecated in OpenSSL 3.0.

Switch to SSL_get1_peer_certificate() when building with OpenSSL 3.0
and OPENSSL_NO_DEPRECATED defined.

diffstat:

src/event/ngx_event_openssl.h | 5 +++++
1 files changed, 5 insertions(+), 0 deletions(-)

diffs (15 lines):

diff -r ec2798eb3648 -r c7c6a87c068d src/event/ngx_event_openssl.h
--- a/src/event/ngx_event_openssl.h Tue Aug 10 23:42:59 2021 +0300
+++ b/src/event/ngx_event_openssl.h Tue Aug 10 23:43:16 2021 +0300
@@ -64,6 +64,11 @@
#endif


+#if (OPENSSL_VERSION_NUMBER >= 0x30000000L && !defined SSL_get_peer_certificate)
+#define SSL_get_peer_certificate(s) SSL_get1_peer_certificate(s)
+#endif
+
+
typedef struct ngx_ssl_ocsp_s ngx_ssl_ocsp_t;


_______________________________________________
nginx-devel mailing list
nginx-devel@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx-devel
Subject Author Views Posted

[nginx] SSL: SSL_get_peer_certificate() is deprecated in OpenSSL 3.0.

Maxim Dounin 72 November 16, 2021 09:54AM



Sorry, you do not have permission to post/reply in this forum.

Online Users

Guests: 66
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready