SSL_OP_NO_SSL_MASK is not available from openssl 1.0.1

Issue #523 resolved
El Topo created an issue

commit eb2f060d1356deaada73a18ad69a90f3c9a82261 has src/ssl/Ssl.c using SSL_OP_NO_SSL_MASK, which is not available from libssl-dev-1.0.1t (current debian stable).

For old openssl version to work with monit's new code, probably Ssl.c should check if SSL_OP_NO_SSL_MASK is defined and define it if necessary. The following definition is copied from ssl.h from debian testing libssl-dev-1.1.0c-2

#ifndef SSL_OP_NO_SSL_MASK
#define SSL_OP_NO_SSL_MASK (SSL_OP_NO_SSLv3|\
        SSL_OP_NO_TLSv1|SSL_OP_NO_TLSv1_1|SSL_OP_NO_TLSv1_2)
#endif

Comments (2)

  1. Log in to comment