On 18/03/14 10:39, Steffan Karger wrote: > Hi, > >> On 17/03/2014 23:23, James Yonan wrote: >> >> On 17/03/2014 14:29, Gert Doering wrote: >>> Right now, if I read configure.ac correct, we require 0.9.6 or later >>> (and check this only if pkg-config is available) - but obviously, >>> SSL_OP_NO_TICKET was added later on. >>> >>> Fix 1: only use SSL_OP_NO_TICKET if available Fix 2: require a more >>> recent OpenSSL version >> >> I would think an #ifdef should be fine. > > SSL_OP_NO_TICKET was added in OpenSSL 0.9.8f / 1.0.0. The > ECDH-patchset (for 2.4) already requires 0.9.8, so I would prefer to > require 0.9.8f or newer for master/2.4, but just add #ifdef's for 2.3.
There's JJK's comments, which makes sense. In addition, RHEL 5 (which we're supposed to support) only ships openssl-0.9.8e. -- kind regards, David Sommerseth
signature.asc
Description: OpenPGP digital signature
