[patch] unified diff for httpd 2.4.26-dev

patch-httpd-2.4.26-dev-LibreSSL (text/plain), 6.90 KB, created by Bernard Spil on 2017-06-13 21:08:10 UTC

(hide)

Description: unified diff for httpd 2.4.26-dev

Filename:

MIME Type:

Creator: Bernard Spil

Created: 2017-06-13 21:08:10 UTC

Size: 6.90 KB

patch

obsolete

>--- support/ab.c.orig 2017-05-28 21:15:41 UTC >+++ support/ab.c >@@ -2514,7 +2514,7 @@ int main(int argc, const char * const ar > exit(1); > } > SSL_CTX_set_options(ssl_ctx, SSL_OP_ALL); >-#if OPENSSL_VERSION_NUMBER >= 0x10100000L >+#if OPENSSL_VERSION_NUMBER >= 0x10100000L && !defined(LIBRESSL_VERSION_NUMBER) > SSL_CTX_set_max_proto_version(ssl_ctx, max_prot); > SSL_CTX_set_min_proto_version(ssl_ctx, min_prot); > #endif >--- modules/ssl/mod_ssl.c.orig 2017-04-03 11:39:20 UTC >+++ modules/ssl/mod_ssl.c >@@ -337,7 +337,7 @@ static apr_status_t ssl_cleanup_pre_conf > #if HAVE_ENGINE_LOAD_BUILTIN_ENGINES > ENGINE_cleanup(); > #endif >-#if OPENSSL_VERSION_NUMBER >= 0x1000200fL >+#if OPENSSL_VERSION_NUMBER >= 0x1000200fL && !defined(OPENSSL_NO_COMP) > SSL_COMP_free_compression_methods(); > #endif > >@@ -390,7 +390,7 @@ static int ssl_hook_pre_config(apr_pool_ > /* We must register the library in full, to ensure our configuration > * code can successfully test the SSL environment. > */ >-#if OPENSSL_VERSION_NUMBER < 0x10100000L >+#if OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER) > CRYPTO_malloc_init(); > #else > OPENSSL_malloc_init(); >--- modules/ssl/ssl_engine_init.c.orig 2017-04-03 11:39:20 UTC >+++ modules/ssl/ssl_engine_init.c >@@ -47,7 +47,7 @@ APR_IMPLEMENT_OPTIONAL_HOOK_RUN_ALL(ssl, > #define KEYTYPES "RSA or DSA" > #endif > >-#if OPENSSL_VERSION_NUMBER < 0x10100000L >+#if OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER) > /* OpenSSL Pre-1.1.0 compatibility */ > /* Taken from OpenSSL 1.1.0 snapshot 20160410 */ > static int DH_set0_pqg(DH *dh, BIGNUM *p, BIGNUM *q, BIGNUM *g) >@@ -380,7 +380,7 @@ apr_status_t ssl_init_Module(apr_pool_t > modssl_init_app_data2_idx(); /* for modssl_get_app_data2() at request time */ > > init_dh_params(); >-#if OPENSSL_VERSION_NUMBER >= 0x10100000L >+#if OPENSSL_VERSION_NUMBER >= 0x10100000L && !defined(LIBRESSL_VERSION_NUMBER) > init_bio_methods(); > #endif > >@@ -583,7 +583,7 @@ static apr_status_t ssl_init_ctx_protoco > > SSL_CTX_set_options(ctx, SSL_OP_ALL); > >-#if OPENSSL_VERSION_NUMBER < 0x10100000L >+#if OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER) > /* always disable SSLv2, as per RFC 6176 */ > SSL_CTX_set_options(ctx, SSL_OP_NO_SSLv2); > >@@ -2011,7 +2011,7 @@ apr_status_t ssl_init_ModuleKill(void *d > > } > >-#if OPENSSL_VERSION_NUMBER >= 0x10100000L >+#if OPENSSL_VERSION_NUMBER >= 0x10100000L && !defined(LIBRESSL_VERSION_NUMBER) > free_bio_methods(); > #endif > free_dh_params(); >--- modules/ssl/ssl_engine_io.c.orig 2017-05-30 12:26:05 UTC >+++ modules/ssl/ssl_engine_io.c >@@ -549,7 +549,7 @@ static long bio_filter_in_ctrl(BIO *bio, > return -1; > } > >-#if OPENSSL_VERSION_NUMBER < 0x10100000L >+#if OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER) > > static BIO_METHOD bio_filter_out_method = { > BIO_TYPE_MEM, >@@ -2024,7 +2024,7 @@ static void ssl_io_input_add_filter(ssl_ > > filter_ctx->pInputFilter = ap_add_input_filter(ssl_io_filter, inctx, r, c); > >-#if OPENSSL_VERSION_NUMBER < 0x10100000L >+#if OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER) > filter_ctx->pbioRead = BIO_new(&bio_filter_in_method); > #else > filter_ctx->pbioRead = BIO_new(bio_filter_in_method); >@@ -2059,7 +2059,7 @@ void ssl_io_filter_init(conn_rec *c, req > filter_ctx->pOutputFilter = ap_add_output_filter(ssl_io_filter, > filter_ctx, r, c); > >-#if OPENSSL_VERSION_NUMBER < 0x10100000L >+#if OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER) > filter_ctx->pbioWrite = BIO_new(&bio_filter_out_method); > #else > filter_ctx->pbioWrite = BIO_new(bio_filter_out_method); >--- modules/ssl/ssl_engine_kernel.c.orig 2017-05-02 11:01:17 UTC >+++ modules/ssl/ssl_engine_kernel.c >@@ -1733,7 +1733,7 @@ static void modssl_proxy_info_log(conn_r > * so we need to increment here to prevent them from > * being freed. > */ >-#if OPENSSL_VERSION_NUMBER < 0x10100000L >+#if OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER) > #define modssl_set_cert_info(info, cert, pkey) \ > *cert = info->x509; \ > CRYPTO_add(&(*cert)->references, +1, CRYPTO_LOCK_X509); \ >--- modules/ssl/ssl_engine_vars.c.orig 2017-03-20 12:01:16 UTC >+++ modules/ssl/ssl_engine_vars.c >@@ -529,7 +529,7 @@ static char *ssl_var_lookup_ssl_cert(apr > resdup = FALSE; > } > else if (strcEQ(var, "A_SIG")) { >-#if OPENSSL_VERSION_NUMBER < 0x10100000L >+#if OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER) > nid = OBJ_obj2nid((ASN1_OBJECT *)(xs->cert_info->signature->algorithm)); > #else > const ASN1_OBJECT *paobj; >@@ -541,7 +541,7 @@ static char *ssl_var_lookup_ssl_cert(apr > resdup = FALSE; > } > else if (strcEQ(var, "A_KEY")) { >-#if OPENSSL_VERSION_NUMBER < 0x10100000L >+#if OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER) > nid = OBJ_obj2nid((ASN1_OBJECT *)(xs->cert_info->key->algor->algorithm)); > #else > ASN1_OBJECT *paobj; >--- modules/ssl/ssl_private.h.orig 2017-04-03 11:39:20 UTC >+++ modules/ssl/ssl_private.h >@@ -136,7 +136,7 @@ > #endif > > /* session id constness */ >-#if OPENSSL_VERSION_NUMBER < 0x10100000L >+#if OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER) > #define IDCONST > #else > #define IDCONST const >@@ -159,7 +159,7 @@ > #if !defined(OPENSSL_NO_OCSP) && defined(SSL_CTX_set_tlsext_status_cb) > #define HAVE_OCSP_STAPLING > /* All exist but are no longer macros since OpenSSL 1.1.0 */ >-#if OPENSSL_VERSION_NUMBER < 0x10100000L >+#if OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER) > /* backward compatibility with OpenSSL < 1.0 */ > #ifndef sk_OPENSSL_STRING_num > #define sk_OPENSSL_STRING_num sk_num >@@ -199,7 +199,7 @@ > > #endif /* !defined(OPENSSL_NO_TLSEXT) && defined(SSL_set_tlsext_host_name) */ > >-#if OPENSSL_VERSION_NUMBER < 0x10100000L >+#if OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER) > #define BN_get_rfc2409_prime_768 get_rfc2409_prime_768 > #define BN_get_rfc2409_prime_1024 get_rfc2409_prime_1024 > #define BN_get_rfc3526_prime_1536 get_rfc3526_prime_1536 >@@ -219,7 +219,7 @@ void init_bio_methods(void); > void free_bio_methods(void); > #endif > >-#if OPENSSL_VERSION_NUMBER < 0x10002000L >+#if OPENSSL_VERSION_NUMBER < 0x10002000L || defined(LIBRESSL_VERSION_NUMBER) > #define X509_STORE_CTX_get0_store(x) (x->ctx) > #endif > >--- modules/ssl/ssl_util_ssl.h.orig 2017-03-20 12:01:16 UTC >+++ modules/ssl/ssl_util_ssl.h >@@ -41,7 +41,7 @@ > #define MODSSL_LIBRARY_VERSION OPENSSL_VERSION_NUMBER > #define MODSSL_LIBRARY_NAME "OpenSSL" > #define MODSSL_LIBRARY_TEXT OPENSSL_VERSION_TEXT >-#if OPENSSL_VERSION_NUMBER < 0x10100000L >+#if OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER) > #define MODSSL_LIBRARY_DYNTEXT SSLeay_version(SSLEAY_VERSION) > #else > #define MODSSL_LIBRARY_DYNTEXT OpenSSL_version(OPENSSL_VERSION) View Attachment As Diff View Attachment As Raw

This is ASF Bugzilla: the Apache Software Foundation bug system. In case of problems with the functioning of ASF Bugzilla, please contact bugzilla-admin@apache.org. Please Note: this e-mail address is only for reporting problems with ASF Bugzilla. Mail about any other subject will be silently ignored.

• • Home
  • | New
  • | Browse
  • | Search
  • |
    [?]
  • | Reports
  • | Help
  • | New Account
  • | Log In
    Remember [x]
  • | Forgot Password
    Login: [x]