Only check OpenSSL Major/Minor/Fix/Status, not Patch

bk: 4237ad97XcldUZuGW7xW_8A-kizikQ

diff --git a/util/ntp-keygen.c b/util/ntp-keygen.c
index d61962eef5ebc0fa33ca1e8e962c2dd1ebbf1c9a..2cd763ec030467edcb30b68e57d5d97cbd8bcc1e 100644 (file)
--- a/util/ntp-keygen.c
+++ b/util/ntp-keygen.c
@@ -255,7 +255,11 @@ main(
 #endif
 
 #ifdef OPENSSL
-       if (SSLeay() != OPENSSL_VERSION_NUMBER) {
+       /*
+        * OpenSSL version numbers: MNNFFPPS: major minor fix patch status
+        * We match major, minor, fix and status (not patch)
+        */
+       if ((SSLeay() ^ OPENSSL_VERSION_NUMBER) & ~0xff0L) {
                fprintf(stderr,
                    "OpenSSL version mismatch. Built against %lx, you have %lx\n",
                    OPENSSL_VERSION_NUMBER, SSLeay());