On 19.8.12 19:37, Dr Stephen Henson wrote: > On 19/08/2012 18:22, Kaspar Brand wrote: >> (ssl.h is not customized by OpenSSL's Configure script, AFAICT you would >> have to call "openssl version -f" and look for any flags set at compile >> time.) >> >> I.e., unless mod_ssl is explicitly compiled with -DOPENSSL_NO_SSL2 (set >> through CPPFLAGS/CFLAGS), an #ifdef OPENSSL_NO_SSL2 has no effect, and >> the blocks enclosed with #ifndef OPENSSL_NO_SSL2 will get included, >> irrespective of how OpenSSL has been compiled. >> > > The usual way is to use no-ssl2 as an argument to Configure or config which > then > adds OPENSSL_NO_SSL2 into crypto/opensslconf.h
Ok, thanks for clarifying, I stand corrected. opensslconf.h is included in ssl_private.h via #include <openssl/x509_vfy.h>, that's why the current 2.2.x code is working as expected. Kaspar
