Check-in [cac6170c7a]
Overview
Comment:Disable SSLv3 from our TclTLS builds -- newer versions of LibSSL no longer support it
Downloads: Tarball | ZIP archive | SQL archive
Timelines: family | ancestors | descendants | both | trunk
Files: files | file ages | folders
SHA1:cac6170c7a207d32e53fc5c0e985b684f93e28e2
User & Date: rkeene on 2016-07-08 21:36:49
Other Links: manifest | tags
Context
2016-07-08
21:56
Updated to try to use pkg-config to determine additional libraries for libssl check-in: 8edfc5151b user: rkeene tags: trunk
21:36
Disable SSLv3 from our TclTLS builds -- newer versions of LibSSL no longer support it check-in: cac6170c7a user: rkeene tags: trunk
19:41
Updated to support building our own libSSL (LibreSSL) if none is available or if requested (KC_TLS_BUILDSSL) check-in: 3defed1bc3 user: rkeene tags: trunk
Changes

Modified tls/build.sh from [1b0c40489d] to [33f65977be].

   135    135   		tryopts="--enable-shared"
   136    136   	else
   137    137   		tryopts="--disable-shared"
   138    138   	fi
   139    139   
   140    140   	# Disable SSLv2, newer SSL libraries drop support for it entirely
   141    141   	CFLAGS="${CFLAGS} -DNO_SSL2=1"
          142  +
          143  +	# Disable SSLv3, newer SSL libraries drop support for it entirely
          144  +	CFLAGS="${CFLAGS} -DNO_SSL3=1"
   142    145   
   143    146   	SAVE_CFLAGS="${CFLAGS}"
   144    147   	SAVE_LIBS="${LIBS}"
   145    148   	for tryopt in $tryopts __fail__; do
   146    149   		CFLAGS="${SAVE_CFLAGS}"
   147    150   		LIBS="${SAVE_LIBS}"
   148    151   		export CFLAGS LIBS