Hi,

For generate-certificates, X509V3_EXT_conf is used but it's an (very) old API
call: X509V3_EXT_nconf must be preferred. Openssl compatibility is ok
because it's inside #ifdef SSL_CTRL_SET_TLSEXT_HOSTNAME, introduce 5
years after X509V3_EXT_nconf.
(BoringSSL only have X509V3_EXT_nconf)

Christopher, if you have time to check this little patch :)

++
Manu


Attachment: 0001-MINOR-ssl-cleanup-old-openssl-API-call.patch
Description: Binary data

Attachment: 0002-MINOR-ssl-generate-certificates-for-BoringSSL.patch
Description: Binary data

Reply via email to