Hi, > On 17/03/2014 23:23, James Yonan wrote: > > On 17/03/2014 14:29, Gert Doering wrote: > > Right now, if I read configure.ac correct, we require 0.9.6 or later > > (and check this only if pkg-config is available) - but obviously, > > SSL_OP_NO_TICKET was added later on. > > > > Fix 1: only use SSL_OP_NO_TICKET if available Fix 2: require a more > > recent OpenSSL version > > I would think an #ifdef should be fine.
SSL_OP_NO_TICKET was added in OpenSSL 0.9.8f / 1.0.0. The ECDH-patchset (for 2.4) already requires 0.9.8, so I would prefer to require 0.9.8f or newer for master/2.4, but just add #ifdef's for 2.3. -Steffan
