Re: [PATCH 1/1] src/openssl.c (ssl_check_certificate): Build with -DOPENSSL_NO_DEPRECATED

[Tim Rühsen]

Thanks, LGTM

Will be merged before the next release.
Regards, Tim

On 2/20/26 8:28 PM, Philip Prindeville via Primary discussion list for 
GNU Wget wrote:
From: Philip Prindeville <phil...@redfish-solutions.com>

---
  src/openssl.c | 4 ++++
  1 file changed, 4 insertions(+)

diff --git a/src/openssl.c b/src/openssl.c
index 
0e16373f85dc463750a75d0cd28122a0e89a62ef..dfcda6027763260998050ece735deecfeb8cd8e1
 100644
--- a/src/openssl.c
+++ b/src/openssl.c
@@ -1044,7 +1044,11 @@ ssl_check_certificate (int fd, const char *host)
    if (opt.check_cert == CHECK_CERT_QUIET && pinsuccess)
      return success;
  
+#ifdef OPENSSL_NO_DEPRECATED_3_0
+  cert = SSL_get1_peer_certificate (conn);
+#else
    cert = SSL_get_peer_certificate (conn);
+#endif
    if (!cert)
      {
        logprintf (LOG_NOTQUIET, _("%s: No certificate presented by %s.\n"),