ssl-util: prefer OpenSSL 4

For the next version we can switch to preferring the new version

diff --git a/src/shared/ssl-util.c b/src/shared/ssl-util.c
index 226120c70e66f1f9873c056ac0cd85fa56516082..4b7ab2ec29f741c44dbccbc3d3abf244dee7c19b 100644 (file)
--- a/src/shared/ssl-util.c
+++ b/src/shared/ssl-util.c
@@ -40,8 +40,7 @@ int dlopen_libssl(int log_level) {
 
         LIBSSL_NOTE(SD_ELF_NOTE_DLOPEN_PRIORITY_SUGGESTED);
 
-        // FIXME: switch order to prefer libssl.so.4 in a future version once it has stabilized
-        FOREACH_STRING(soname, "libssl.so.3", "libssl.so.4") {
+        FOREACH_STRING(soname, "libssl.so.4", "libssl.so.3") {
                 r = dlopen_many_sym_or_warn(
                                 &libssl_dl,
                                 soname,

diff --git a/src/shared/ssl-util.h b/src/shared/ssl-util.h
index aa3b8308665bac59c9a1cbc9be008a4c18dd9205..77b5c049f9e3ada7cadc599cf5d26e4f1c3b6a2b 100644 (file)
--- a/src/shared/ssl-util.h
+++ b/src/shared/ssl-util.h
@@ -12,7 +12,7 @@ int dlopen_libssl(int log_level);
         SD_ELF_NOTE_DLOPEN("libssl",                                    \
                            "Support for TLS",                           \
                            priority,                                    \
-                           "libssl.so.3", "libssl.so.4")
+                           "libssl.so.4", "libssl.so.3")
 
 #define DLOPEN_LIBSSL(log_level, priority)                              \
         ({                                                              \