summaryrefslogtreecommitdiffstats
path: root/src/openvpn/ssl_openssl.c
diff options
context:
space:
mode:
authorSteffan Karger <steffan@karger.me>2014-03-23 14:53:01 +0100
committerGert Doering <gert@greenie.muc.de>2014-03-23 22:03:08 +0100
commit69a6b0c388fe1f463ab59cc8e414a4c5c635ab79 (patch)
treeb5d5a9253e7a5dd276ae955bce6a570ebc628244 /src/openvpn/ssl_openssl.c
parent05660e788a10ea28f886360ce7a0c100577f5813 (diff)
downloadopenvpn-69a6b0c388fe1f463ab59cc8e414a4c5c635ab79.tar.gz
openvpn-69a6b0c388fe1f463ab59cc8e414a4c5c635ab79.tar.xz
openvpn-69a6b0c388fe1f463ab59cc8e414a4c5c635ab79.zip
Bump minimum OpenSSL version to 0.9.8
OpenSSL 0.9.7 and older are considered obsolete (see http://www.openssl.org/news/news.html). This patch updates configure.ac to require OpenSSL 0.9.8 or newer, and removes a number of #ifdefs that are now no longer needed. Signed-off-by: Steffan Karger <steffan@karger.me> Acked-by: Arne Schwabe <arne@rfc2549.org> Message-Id: <1395582781-27966-1-git-send-email-steffan@karger.me> URL: http://article.gmane.org/gmane.network.openvpn.devel/8392 Signed-off-by: Gert Doering <gert@greenie.muc.de>
Diffstat (limited to 'src/openvpn/ssl_openssl.c')
-rw-r--r--src/openvpn/ssl_openssl.c4
1 files changed, 0 insertions, 4 deletions
diff --git a/src/openvpn/ssl_openssl.c b/src/openvpn/ssl_openssl.c
index 68a1d59..2da7eba 100644
--- a/src/openvpn/ssl_openssl.c
+++ b/src/openvpn/ssl_openssl.c
@@ -848,11 +848,7 @@ tls_ctx_load_ca (struct tls_root_ctx *ctx, const char *ca_file,
msg(M_WARN, "WARNING: experimental option --capath %s", ca_path);
else
msg(M_SSLERR, "Cannot add lookup at --capath %s", ca_path);
-#if OPENSSL_VERSION_NUMBER >= 0x00907000L
X509_STORE_set_flags (store, X509_V_FLAG_CRL_CHECK | X509_V_FLAG_CRL_CHECK_ALL);
-#else
- msg(M_WARN, "WARNING: this version of OpenSSL cannot handle CRL files in capath");
-#endif
}
}