diff options
author | Steffan Karger <steffan@karger.me> | 2014-03-23 14:53:01 +0100 |
---|---|---|
committer | Gert Doering <gert@greenie.muc.de> | 2014-03-23 22:03:08 +0100 |
commit | 69a6b0c388fe1f463ab59cc8e414a4c5c635ab79 (patch) | |
tree | b5d5a9253e7a5dd276ae955bce6a570ebc628244 /src/openvpn/ssl_openssl.c | |
parent | 05660e788a10ea28f886360ce7a0c100577f5813 (diff) | |
download | openvpn-69a6b0c388fe1f463ab59cc8e414a4c5c635ab79.tar.gz openvpn-69a6b0c388fe1f463ab59cc8e414a4c5c635ab79.tar.xz openvpn-69a6b0c388fe1f463ab59cc8e414a4c5c635ab79.zip |
Bump minimum OpenSSL version to 0.9.8
OpenSSL 0.9.7 and older are considered obsolete (see
http://www.openssl.org/news/news.html). This patch updates configure.ac to
require OpenSSL 0.9.8 or newer, and removes a number of #ifdefs that are
now no longer needed.
Signed-off-by: Steffan Karger <steffan@karger.me>
Acked-by: Arne Schwabe <arne@rfc2549.org>
Message-Id: <1395582781-27966-1-git-send-email-steffan@karger.me>
URL: http://article.gmane.org/gmane.network.openvpn.devel/8392
Signed-off-by: Gert Doering <gert@greenie.muc.de>
Diffstat (limited to 'src/openvpn/ssl_openssl.c')
-rw-r--r-- | src/openvpn/ssl_openssl.c | 4 |
1 files changed, 0 insertions, 4 deletions
diff --git a/src/openvpn/ssl_openssl.c b/src/openvpn/ssl_openssl.c index 68a1d59..2da7eba 100644 --- a/src/openvpn/ssl_openssl.c +++ b/src/openvpn/ssl_openssl.c @@ -848,11 +848,7 @@ tls_ctx_load_ca (struct tls_root_ctx *ctx, const char *ca_file, msg(M_WARN, "WARNING: experimental option --capath %s", ca_path); else msg(M_SSLERR, "Cannot add lookup at --capath %s", ca_path); -#if OPENSSL_VERSION_NUMBER >= 0x00907000L X509_STORE_set_flags (store, X509_V_FLAG_CRL_CHECK | X509_V_FLAG_CRL_CHECK_ALL); -#else - msg(M_WARN, "WARNING: this version of OpenSSL cannot handle CRL files in capath"); -#endif } } |