Update to require OpenSSL 1.0.2 or later

diff --git a/configure.in b/configure.in
index 37293e618797a957ebe6b5f7b9479e9165e1362b..1c7bad4c0b18f9e988c4b161a996f5078917430e 100644 (file)
--- a/configure.in
+++ b/configure.in
@@ -1164,6 +1164,13 @@ if test $ol_with_tls = openssl || test $ol_with_tls = auto ; then
        AC_CHECK_HEADERS(openssl/ssl.h)
 
        if test $ac_cv_header_openssl_ssl_h = yes ; then
+               AC_PREPROC_IFELSE([AC_LANG_SOURCE(
+                       [[#include <openssl/opensslv.h>]
+                       [#if OPENSSL_VERSION_NUMBER < 0x1000200fL]
+                       [#error "OpenSSL is too old"]
+                       [#endif]])],
+                       , [AC_MSG_FAILURE([OpenSSL 1.0.2a or newer required])])
+
                AC_CHECK_LIB(ssl, SSL_CTX_set_msg_callback,
                        [have_openssl=yes
                        need_rsaref=no], [have_openssl=no],

diff --git a/doc/guide/admin/appendix-recommended-versions.sdf b/doc/guide/admin/appendix-recommended-versions.sdf
index 1689e28d8e364f0c82bceec23c33ca744fd87076..d52e3eaa3cb4ff3a93c7532d361bae802cc9c261 100644 (file)
--- a/doc/guide/admin/appendix-recommended-versions.sdf
+++ b/doc/guide/admin/appendix-recommended-versions.sdf
@@ -15,7 +15,7 @@ H2: Dependency Versions
 !block table; align=Center; coltags="N,EX,EX"; title="Table 8.5: OpenLDAP Software Dependency Versions"
 Feature|Software|Version
 {{TERM[expand]TLS}}:
-|{{PRD:OpenSSL}}|0.9.7+
+|{{PRD:OpenSSL}}|1.0.2+
 |{{PRD:GnuTLS}}|2.12.0
 |{{PRD:MozNSS}}|3.12.9
 {{TERM[expand]SASL}}|{{PRD:Cyrus SASL}}|2.1.21+