Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 30 May 2023 18:36:22 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 271728] libunbound uses deprecated SSL_CTX_set_ecdh_auto
Message-ID:  <bug-271728-227@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D271728

            Bug ID: 271728
           Summary: libunbound uses deprecated SSL_CTX_set_ecdh_auto
           Product: Base System
           Version: CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: misc
          Assignee: bugs@FreeBSD.org
          Reporter: emaste@freebsd.org

When attempting to build libunbound with
  CFLAGS+=3D-DOPENSSL_API_COMPAT=3D0x10100000L
as part of OpenSSL 3.0 update testing produced this error:

/tmp/cirrus-ci-build/contrib/unbound/util/net_help.c:1035:6: error: call to
undeclared function 'SSL_CTX_set_ecdh_auto'; ISO C99 and later do not suppo=
rt
implicit function declarations [-Werror,-Wimplicit-function-declaration]
        if(!SSL_CTX_set_ecdh_auto(ctx,1)) {
            ^
/tmp/cirrus-ci-build/contrib/unbound/util/net_help.c:1035:6: note: did you =
mean
'SSL_CTX_set_ex_data'?
/usr/obj/tmp/cirrus-ci-build/amd64.amd64/tmp/usr/include/openssl/ssl.h:2037=
:12:
note: 'SSL_CTX_set_ex_data' declared here
__owur int SSL_CTX_set_ex_data(SSL_CTX *ssl, int idx, void *data);
           ^
1 error generated.
make[3]: stopped in /tmp/cirrus-ci-build

There is a config.h HAVE_DECL_SSL_CTX_SET_ECDH_AUTO #define that gets set
(because the function does in fact exist), but as we maintain config.h manu=
ally
I think we can just turn it off.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-271728-227>