hi, it is ongoing simplification process. we want to depend on versions as less as possible.
Ilya
From e84681e9ba4ae98cca727554a94e0760dd7066df Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin <[email protected]> Date: Wed, 28 Oct 2020 11:13:32 +0500 Subject: [PATCH] BUILD: ssl: use more elegant way for detection whether SNI enabled it is better to depend on SSL_CTRL_SET_TLSEXT_HOSTNAME than on library versions --- src/ssl_sock.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/ssl_sock.c b/src/ssl_sock.c index 959398c33..5e7726864 100644 --- a/src/ssl_sock.c +++ b/src/ssl_sock.c @@ -2248,7 +2248,7 @@ static void ssl_sock_switchctx_set(SSL *ssl, SSL_CTX *ctx) SSL_set_SSL_CTX(ssl, ctx); } -#if ((HA_OPENSSL_VERSION_NUMBER >= 0x10101000L) || defined(OPENSSL_IS_BORINGSSL)) +#ifdef SSL_CTRL_SET_TLSEXT_HOSTNAME static int ssl_sock_switchctx_err_cbk(SSL *ssl, int *al, void *priv) { -- 2.26.2
