From: Darren Tucker <dtucker@dtucker.net>
Date: Sun, 26 Mar 2023 03:22:53 +0000 (+1100)
Subject: Find suitable OpenSSL version.
X-Git-Tag: V_9_4_P1~131
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b308c636f5b5d89eecb98be00b3d56306a005a09;p=thirdparty%2Fopenssh-portable.git

Find suitable OpenSSL version.

Check the installed OpenSSL versions for a suitable one, and if there
isn't (and we don't have a specific version configured) then build
without OpenSSL.
---

diff --git a/.github/configs b/.github/configs
index eb91732c4..cf1988d71 100755
--- a/.github/configs
+++ b/.github/configs
@@ -296,13 +296,22 @@ case "`./config.guess`" in
 	;;
 esac
 
-# If we have a local openssl/libressl, use that.
+# Unless specifically configured, search for a suitable version of OpenSSL,
+# otherwise build without it.
 if [ -z "${LIBCRYPTOFLAGS}" ]; then
+	LIBCRYPTOFLAGS="--without-openssl"
 	# last-match
-	for i in /usr/local /usr/local/ssl /usr/local/opt/openssl; do
+	for i in /usr /usr/local /usr/local/ssl /usr/local/opt/openssl; do
+		ver="none"
 		if [ -x ${i}/bin/openssl ]; then
-			LIBCRYPTOFLAGS="--with-ssl-dir=${i}"
+			ver="$(${i}/bin/openssl version)"
 		fi
+		case "$ver" in
+			none) ;;
+			"OpenSSL 0."*|"OpenSSL 1.0."*|"OpenSSL 1.1.0"*) ;;
+			"LibreSSL 2."*|"LibreSSL 3.0."*) ;;
+			*) LIBCRYPTOFLAGS="--with-ssl-dir=${i}" ;;
+		esac
 	done
 fi