httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Kaspar Brand <httpd-dev.2...@velox.ch>
Subject Re: svn commit: r1374640 - /httpd/httpd/branches/2.2.x/STATUS
Date Sun, 19 Aug 2012 17:59:40 GMT
On 19.8.12 19:37, Dr Stephen Henson wrote:
> On 19/08/2012 18:22, Kaspar Brand wrote:
>> (ssl.h is not customized by OpenSSL's Configure script, AFAICT you would
>> have to call "openssl version -f" and look for any flags set at compile
>> time.)
>>
>> I.e., unless mod_ssl is explicitly compiled with -DOPENSSL_NO_SSL2 (set
>> through CPPFLAGS/CFLAGS), an #ifdef OPENSSL_NO_SSL2 has no effect, and
>> the blocks enclosed with #ifndef OPENSSL_NO_SSL2 will get included,
>> irrespective of how OpenSSL has been compiled.
>>
> 
> The usual way is to use no-ssl2 as an argument to Configure or config which then
> adds OPENSSL_NO_SSL2 into crypto/opensslconf.h

Ok, thanks for clarifying, I stand corrected. opensslconf.h is included
in ssl_private.h via #include <openssl/x509_vfy.h>, that's why the
current 2.2.x code is working as expected.

Kaspar

Mime
View raw message