Changeset 5623 for pjproject/trunk/pjlib/src/pj/ssl_sock_ossl.c

Timestamp:

Jul 7, 2017 2:52:44 AM (7 years ago)

Author:

nanang

Message:

Close #1999: Support OpenSSL 1.1.0 with backward compatibility setting turned of (no deprecated APIs).

File:

• pjproject/trunk/pjlib/src/pj/ssl_sock_ossl.c (modified) (6 diffs)

pjproject/trunk/pjlib/src/pj/ssl_sock_ossl.c

@@ -116 +116 @@
 #  define M_ASN1_STRING_data(x)     ASN1_STRING_get0_data(x)
 #  define M_ASN1_STRING_length(x)   ASN1_STRING_length(x)
+#  define X509_get_notBefore(x)     X509_get0_notBefore(x)
+#  define X509_get_notAfter(x)      X509_get0_notAfter(x)
 #else
 #  define SSL_CIPHER_get_id(c)      (c)->id
@@ -405 +407 @@
 
     /* Init OpenSSL lib */
+#if OPENSSL_VERSION_NUMBER < 0x10100000L
     SSL_library_init();
     SSL_load_error_strings();
+#else
+    OPENSSL_init_ssl(0, NULL);
+#endif
 #if OPENSSL_VERSION_NUMBER < 0x009080ffL
     /* This is now synonym of SSL_library_init() */
@@ -422 +428 @@
         const char *cname;
 
+#if OPENSSL_VERSION_NUMBER < 0x10100000L
         meth = (SSL_METHOD*)SSLv23_server_method();
         if (!meth)
@@ -433 +440 @@
             meth = (SSL_METHOD*)SSLv2_server_method();
 #endif
+
+#else
+        /* Specific version methods are deprecated in 1.1.0 */
+        meth = (SSL_METHOD*)TLS_method();
+#endif
+
         pj_assert(meth);
 
@@ -650 +663 @@
 
     /* Determine SSL method to use */
+#if OPENSSL_VERSION_NUMBER < 0x10100000L
     switch (ssock->param.proto) {
     case PJ_SSL_SOCK_PROTO_TLS1:
@@ -665 +679 @@
         break;
     }
+#else
+    /* Specific version methods are deprecated in 1.1.0 */
+    ssl_method = (SSL_METHOD*)TLS_method();
+#endif
 
     if (!ssl_method) {