Hi hanno, we've been discussing it extensively here.  It's been out
and back in and out and back in ;)

the problem is there are multiple pieces of software, all of which
test for this stuff rather badly. and either
way we do it seems to break things.

On Mon, Jul 14, 2014 at 6:55 AM, Hanno Böck <[email protected]> wrote:
> Hello,
>
> I recently tried to rebuild a complete gentoo system with libressl, if
> you haven't seen, I've blogged about it:
> https://blog.hboeck.de/archives/851-LibreSSL-on-Gentoo.html
>
>
> One of the issues that popped up was in dovecot. Compilation failed due
> to missing constants of the compression functions. What dovecot's
> confiugre script does is that it checks for the existence
> SSL_get_current_compression() and if its available it assumes that
> compression is available.
>
> Libressl contains a stub function of SSL_get_current_compression() so
> this check returns true.
>
> The interesting thing is: This check probably also doesn't work with
> openssl, because when disabling compression openssl also leaves a stub
> function just returning NULL.
>
> I'd like to ask about opinions here: Should these stub functions be
> removed completely? This will probably break some more apps and bears
> down to the question how much api breakage libressl is willing to
> accept. However, in the case of egd it was decided against having such
> stub functions around.
>
> Patch to remove compression related stub functions attached.
>
> cu,
> --
> Hanno Böck
> http://hboeck.de/
>
> mail/jabber: [email protected]
> GPG: BBB51E42

Reply via email to