Re: Some compilation SSL errors/warnings on debian testing

Hi Emeric, > Le 20 mars 2017 à 12:50, Emeric Brun a écrit : > > Hi Manu, > > On 03/20/2017 11:46 AM, Emeric Brun wrote: >> Hi Manu, >> >> On 03/17/2017 06:43 PM, Emmanuel Hocdet wrote: >>> Le 16 mars 2017 à 17:49, Emmanuel Hocdet

Re: Some compilation SSL errors/warnings on debian testing

Hi Manu, On 03/20/2017 11:46 AM, Emeric Brun wrote: > Hi Manu, > > On 03/17/2017 06:43 PM, Emmanuel Hocdet wrote: >> >>> Le 16 mars 2017 à 17:49, Emmanuel Hocdet >> > a écrit : >>> >>> Hi Emeric, >>> Le 16 mars 2017 à 14:44, Emeric Brun

Re: Some compilation SSL errors/warnings on debian testing

Hi Manu, On 03/17/2017 06:43 PM, Emmanuel Hocdet wrote: > >> Le 16 mars 2017 à 17:49, Emmanuel Hocdet > > a écrit : >> >> Hi Emeric, >> >>> Le 16 mars 2017 à 14:44, Emeric Brun >> > a écrit : >>> >>> I'm

Re: Some compilation SSL errors/warnings on debian testing

Le 16 mars 2017 à 17:49, Emmanuel Hocdet a écrit :Hi Emeric,Le 16 mars 2017 à 14:44, Emeric Brun a écrit :I'm clearly not sure that setting openssl's options to ~no-tlsxx have the same behavior than forcing the callback sets (using force-) to one protocol.I

Re: Some compilation SSL errors/warnings on debian testing

Hi Emeric, > Le 16 mars 2017 à 14:44, Emeric Brun a écrit : > > I'm clearly not sure that setting openssl's options to ~no-tlsxx have the > same behavior than forcing the callback sets (using force-) to one protocol. > > I always suspected that no-tlsxx options applies on a

Re: Some compilation SSL errors/warnings on debian testing

Hi Manu, On 03/16/2017 02:44 PM, Emeric Brun wrote: > On 03/15/2017 07:06 PM, Willy Tarreau wrote: >> Hi Manu, >> >> On Wed, Mar 15, 2017 at 07:00:28PM +0100, Emmanuel Hocdet wrote: ssl_options seems still valid, all directives can be mapped to it and keep compatibility. >>> >>>

Re: Some compilation SSL errors/warnings on debian testing

On 03/15/2017 07:06 PM, Willy Tarreau wrote: > Hi Manu, > > On Wed, Mar 15, 2017 at 07:00:28PM +0100, Emmanuel Hocdet wrote: >>> ssl_options seems still valid, all directives can be mapped to it and keep >>> compatibility. >>> >> >> Patch proposal: > > Maybe it could work, let's wait for

Re: Some compilation SSL errors/warnings on debian testing

Hi Manu, On Wed, Mar 15, 2017 at 07:00:28PM +0100, Emmanuel Hocdet wrote: > > ssl_options seems still valid, all directives can be mapped to it and keep > > compatibility. > > > > Patch proposal: Maybe it could work, let's wait for Emeric's feedback. I remember there was a subtle difference

Re: Some compilation SSL errors/warnings on debian testing

Hi Willy,Le 15 mars 2017 à 12:41, Emmanuel Hocdet a écrit :Le 14 mars 2017 à 19:11, Willy Tarreau a écrit :For the little story: openssl-1.1.0 and boringssl have SSL_CTX_set_min_proto_version/SSL_CTX_set_max_proto_versionand other methods to set protocol version are

Re: Some compilation SSL errors/warnings on debian testing

> Le 15 mars 2017 à 12:41, Emmanuel Hocdet a écrit : > > >> Le 14 mars 2017 à 19:11, Willy Tarreau > a >> écrit : >>> >>> For the little story: openssl-1.1.0 and boringssl have >>> SSL_CTX_set_min_proto_version/SSL_CTX_set_max_proto_version

Re: Some compilation SSL errors/warnings on debian testing

> Le 14 mars 2017 à 19:11, Willy Tarreau a écrit : >> >> For the little story: openssl-1.1.0 and boringssl have >> SSL_CTX_set_min_proto_version/SSL_CTX_set_max_proto_version >> and other methods to set protocol version are deprecated (or not >> implemented). >> It will be boring

Re: Some compilation SSL errors/warnings on debian testing

On Tue, Mar 14, 2017 at 10:55:34PM +0100, Pavlos Parissis wrote: > > Just out of curiosity, are there some features of 1.7 that you've > > already got used to and that prevent you from using 1.6, or is this just a > > matter of staying on something modern ? > > > > The latter, I prefer to use

Re: Some compilation SSL errors/warnings on debian testing

On 14/03/2017 10:20 μμ, Willy Tarreau wrote: > On Tue, Mar 14, 2017 at 08:18:27PM +0100, Pavlos Parissis wrote: On Debian testing with openssl 1.1.0e, I get the following warnings when I compile 1.7 and 1.8:

Re: Some compilation SSL errors/warnings on debian testing

On Tue, Mar 14, 2017 at 08:18:27PM +0100, Pavlos Parissis wrote: > >> On Debian testing with openssl 1.1.0e, I get the following warnings when I > >> compile 1.7 and 1.8: > >>

Re: Some compilation SSL errors/warnings on debian testing

On 14/03/2017 05:24 μμ, Willy Tarreau wrote: > Hi Pavlos, > > On Tue, Mar 14, 2017 at 04:43:26PM +0100, Pavlos Parissis wrote: >> Hi, >> >> On Debian testing with openssl 1.1.0e, I get the following warnings when I >> compile 1.7 and 1.8: >>

Re: Some compilation SSL errors/warnings on debian testing

Hi Manu, [ccing Emeric] On Tue, Mar 14, 2017 at 05:39:58PM +0100, Emmanuel Hocdet wrote: > Hi Pavlos > > > Le 14 mars 2017 à 16:43, Pavlos Parissis a > > écrit : > > > > Hi, > > > > On Debian testing with openssl 1.1.0e, I get the following warnings when I > >

Re: Some compilation SSL errors/warnings on debian testing

Hi Willy, > Le 14 mars 2017 à 17:24, Willy Tarreau a écrit : > > Hi Pavlos, > > On Tue, Mar 14, 2017 at 04:43:26PM +0100, Pavlos Parissis wrote: >> Hi, >> >> On Debian testing with openssl 1.1.0e, I get the following warnings when I >> compile 1.7 and 1.8: >>

Re: Some compilation SSL errors/warnings on debian testing

Hi Pavlos > Le 14 mars 2017 à 16:43, Pavlos Parissis a écrit : > > Hi, > > On Debian testing with openssl 1.1.0e, I get the following warnings when I > compile 1.7 and 1.8: >

Re: Some compilation SSL errors/warnings on debian testing

Hi Pavlos, On Tue, Mar 14, 2017 at 04:43:26PM +0100, Pavlos Parissis wrote: > Hi, > > On Debian testing with openssl 1.1.0e, I get the following warnings when I > compile 1.7 and 1.8: >

Some compilation SSL errors/warnings on debian testing

Hi, On Debian testing with openssl 1.1.0e, I get the following warnings when I compile 1.7 and 1.8: https://gist.githubusercontent.com/unixsurfer/9c42361822f23cfe36f3b2169133b551/raw/4665476fdfb2a94d287814a2c8a36215cbebb465/gistfile1.txt When I compile 1.6 I get errors and compilation fails: