On Sat, Jan 04, 2014, Kurt Roeckx wrote:

> On Sat, Jan 04, 2014 at 11:25:27AM +0100, Matijs van Zuijlen via RT wrote:
> > It looks like OpenSSL 1.0.2 will no longer provide the constant
> > SSL_OP_MSIE_SSLV2_RSA_PADDING in its header files
> > (http://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=dece3209f299ebcd82414868ee39b2c6feb3be0a).
> > 
> > This will break dependent software, including all versions of MRI Ruby. 
> > Please
> > consider keeping this constant around until a larger version change.
> 
> >From the diff itself:
> -#define SSL_OP_MSIE_SSLV2_RSA_PADDING                  0x00000040L /* no 
> effect since 0.9.7h and 0.9.8b */
> 
> That means it didn't do anything since 2005/2006.  I'm not sure
> how removing it can be considered to "break" something if it
> didn't do anything.  Are you still trying to use SSL v2?  You
> really stop using that.
> 
> Or is it just that you can no longer build the depend software?
> Then you really should stop using that flag.
> 
> PS: 1.0.1f will already drop that flag if it gets released.
> 

I think this is a case of mapping all the SSL_OP constants automatically. When
I was looking to remove SSL_OP_PKCS1_CHECK_1 to add support for a TLSv1.2 I
hit a similar issue.

The fix is to keep the define and set it to zero.

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]

Reply via email to