Hi, On Tue, Apr 06, 2021 at 10:55:52AM +0000, Maximilian Fillinger wrote: > > This change will break compilation with anything that is < 2.16.0. > > This function is deprecated in 2.16. I don't mind keeping this change to > OpenVPN-NL for now, but for future reference, what's the best solution > when a new version of mbedtls removes the function?
It's still available in 2.26.0... so when they decide to really remove
it, we'll have to see
- what is the oldest mbedtls version we aim to support
- if that is "2.16 or later", we can just apply the change as is
- if that is "before 2.16", we need to add compat code - either
#ifdef on mbedTLS version (if possible), or adding function detection
to configure.ac (as we do for OpenSSL). Both is somewhat annoying.
Now... what *is* the oldest mbedtls version we should reasonably support?
For OpenSSL, we're stuck to 1.0.2 for the time being as that's still
the primary (and bugfix-backported) version on FreeBSD 11 and on RHEL
versions still supported. For mbedTLS I have no idea.
gert
--
"If was one thing all people took for granted, was conviction that if you
feed honest figures into a computer, honest figures come out. Never doubted
it myself till I met a computer with a sense of humor."
Robert A. Heinlein, The Moon is a Harsh Mistress
Gert Doering - Munich, Germany g...@greenie.muc.de
signature.asc
Description: PGP signature
_______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel
