[
https://issues.apache.org/jira/browse/SERF-188?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16379588#comment-16379588
]
Paul Hammant edited comment on SERF-188 at 2/28/18 2:45 AM:
------------------------------------------------------------
FYI, Locally applying this patch get Serf (trunk checkout) building again on
Debian Stretch and the related Raspbian version. Not true with the get-deps.sh
acquired version of serf though - the patch does not apply cleanly, and the
compile barfs after that.
was (Author: paul):
Locally applying this patch will get Serf building again on Debian Stretch and
the related Raspbian version, right?
> Stop using deprecated APIs when compiled with OpenSSL 1.1
> ---------------------------------------------------------
>
> Key: SERF-188
> URL: https://issues.apache.org/jira/browse/SERF-188
> Project: serf
> Issue Type: Improvement
> Affects Versions: serf-trunk
> Environment: OpenSSL 1.1.0f
> Reporter: Quentin Minster
> Priority: Minor
> Labels: warnings
> Attachments: serf-r1813663-openssl11-no-deprecated.patch,
> serf-r1813663-openssl11-no-deprecated.patch
>
>
> Some OpenSSL APIs used by serf were removed from header files in OpenSSL 1.1.
> Serf still builds (at least on my system), but throws a few warnings about
> calls to:
> * {{X509_get_notBefore()}}: replaced by {{X509_get0_notBefore()}}
> * {{X509_get_notAfter()}}: replaced by {{X509_get0_notAfter()}}
> * {{X509_STORE_CTX_get_chain()}}: replaced by {{X509_STORE_CTX_get0_chain()}}
> * {{SSLeay()}}: replaced by {{OpenSSL_version_num()}}
> * {{SSL_library_init()}}: replaced by {{OPENSSL_init_ssl()}}, but calling it
> is not required since initialisation is automatic now
> * {{ERR_load_crypto_strings()}}: replaced by a flag passed to
> {{OPENSSL_init_crypto()}}, if called
> * {{SSL_load_error_strings()}}: replaced by a flag passed to
> {{OPENSSL_init_ssl()}}, if called
> * {{Openssl_add_all_algorithms()}}: not replaced
> The attached patch modifies {{buckets/ssl_buckets.c}} to use the new OpenSSL
> 1.1 APIs, while still detecting and maintaining compatibility with the
> previous API.
> This patch has been tested on my OpenSSL 1.1 system, by doing a SVN check-out
> of a test repository over HTTPS.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
