-
Notifications
You must be signed in to change notification settings - Fork 797
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
6.2.x TS-4435 and TS-5059: Fixes for building with OpenSSL 1.1 #1321
Conversation
FreeBSD build failed! See https://ci.trafficserver.apache.org/job/Github-FreeBSD/1324/ for details. |
Linux build failed! See https://ci.trafficserver.apache.org/job/Github-Linux/1218/ for details. |
Linux build failed! See https://ci.trafficserver.apache.org/job/Github-Linux/1220/ for details. |
FreeBSD build successful! See https://ci.trafficserver.apache.org/job/Github-FreeBSD/1326/ for details. |
Linux build successful! See https://ci.trafficserver.apache.org/job/Github-Linux/1221/ for details. |
FreeBSD build successful! See https://ci.trafficserver.apache.org/job/Github-FreeBSD/1327/ for details. |
FreeBSD build successful! See https://ci.trafficserver.apache.org/job/Github-FreeBSD/1426/ for details. |
Linux build successful! See https://ci.trafficserver.apache.org/job/Github-Linux/1319/ for details. |
[approve ci] |
FreeBSD build successful! See https://ci.trafficserver.apache.org/job/freebsd-github/1500/ for details. |
Linux build successful! See https://ci.trafficserver.apache.org/job/linux-github/1393/ for details. |
clang-analyzer build failed! See https://ci.trafficserver.apache.org/job/clang-analyzer-github/64/ for details. |
@jablko can you please rebase this? |
(cherry picked from commit 26e1aef)
It was renamed before OpenSSL 1.1 was released [1][2]. [1] openssl/openssl@65e2d67 [2] https://rt.openssl.org/Ticket/Display.html?id=4572 (cherry picked from commit 1a08a61)
EVP_MD_CTX and HMAC_CTX were made opaque in OpenSSL 1.1 [1], so allocating them on the stack is no longer supported. Also EVP_MD_CTX_cleanup() was removed. EVP_MD_CTX_reset() should be called instead, to reinitialise an already created structure. [1] https://www.openssl.org/news/changelog#x4 (cherry picked from commit 92d004c)
The remove session callback is triggered when a session is removed, so at best, calling SSL_CTX_remove_session() again is redundant. In OpenSSL 1.1 it's recursive. Fixes apache#1386 (cherry picked from commit cf33b5b)
@PSUdaemon Sure thing -- I rebased this. |
FreeBSD build successful! See https://ci.trafficserver.apache.org/job/freebsd-github/1506/ for details. |
Linux build successful! See https://ci.trafficserver.apache.org/job/linux-github/1399/ for details. |
clang-analyzer build successful! See https://ci.trafficserver.apache.org/job/clang-analyzer-github/70/ for details. |
No description provided.