]> git.ipfire.org Git - thirdparty/apache/httpd.git/commit
mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is set. PR 68080
authorYann Ylavic <ylavic@apache.org>
Wed, 15 Nov 2023 22:09:05 +0000 (22:09 +0000)
committerYann Ylavic <ylavic@apache.org>
Wed, 15 Nov 2023 22:09:05 +0000 (22:09 +0000)
commit922d6bbc423f1684c002031dabc98c7ffabc8e08
treee63c76e01803881481b4def22992e88d2aef2033
parent5875b400ee051852c58f3c2738fc2607b76b0549
mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is set.  PR 68080

Also, always allow for "SSLCryptoDevice builtin" even if the ENGINE API is not
available, OPENSSL_NO_ENGINE or more generally with the new API (providers)
available since OpenSSL >= 3.

* ssl_private.h: Set MODSSL_HAVE_ENGINE_API to 0 if OPENSSL_NO_ENGINE.

* mod_ssl.c, ssl_engine_config.c: Don't depend on HAVE_OPENSSL_ENGINE_H and
  HAVE_ENGINE_INIT to provide [ssl_cmd_]SSLCryptoDevice.

Submitted by: ylavic, jorton

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1913815 13f79535-47bb-0310-9956-ffa450edef68
changes-entries/pr68080.txt [new file with mode: 0644]
modules/ssl/mod_ssl.c
modules/ssl/ssl_engine_config.c
modules/ssl/ssl_private.h