On Wed, Jun 14, 2017 at 03:11:28PM +0200, Christopher Faulet wrote:
> Hi,
> 
> HAProxy compilation fails if OpenSSL 1.0.2 is compiled without the support
> of SSLv3 methods (SSL3_server_method and SSL3_client_method). The manpage
> SSL_CTX_new(3) specifies that these functions are available if
> OPENSSL_NO_SSL3_METHOD is undefined. Here is a fix.

These days I feel like every build fix for one version of openssl breaks
another one. We'll quickly need to have something to validate the build
on the various configurations, or it'll become a real mess. I already
hate it that all openssl forks have significantly diverged to the point
of having to cheat on the #ifdefs. I think in the future we'll have to
default to reverting patches for non-legacy openssl when they break the
legacy one. I'm not claiming it was the case here, just that we really
need to be very careful.

Applied, thanks.
Willy

Reply via email to