4344. [port] Address openssl version differences. [RT #42059]

diff --git a/CHANGES b/CHANGES
index 4dc3d87dc06ff00db28adbe21146321f7b719eae..1757a16cbfa86ee7baab680f34449a67d6fde7eb 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,5 @@
+4344.  [port]          Address openssl version differences. [RT #42059]
+
        --- 9.9.9b2 released ---
 
 4342.  [bug]           'rndc flushtree' could fail to clean the tree if there

diff --git a/lib/dns/openssl_link.c b/lib/dns/openssl_link.c
index 25981e1949dbccf9559eee3f217eb3a357588d54..3a9d8d39af295fa7e5383a999958e73bc299a175 100644 (file)
--- a/lib/dns/openssl_link.c
+++ b/lib/dns/openssl_link.c
@@ -206,6 +206,9 @@ dst__openssl_init(const char *engine) {
        rm->status = entropy_status;
 
 #ifdef USE_ENGINE
+#if !defined(CONF_MFLAGS_DEFAULT_SECTION)
+       OPENSSL_config(NULL);
+#else
        /*
         * OPENSSL_config() can only be called a single time as of
         * 1.0.2e so do the steps individually.
@@ -216,6 +219,7 @@ dst__openssl_init(const char *engine) {
        CONF_modules_load_file(NULL, NULL,
                               CONF_MFLAGS_DEFAULT_SECTION |
                               CONF_MFLAGS_IGNORE_MISSING_FILE);
+#endif
 
        if (engine != NULL && *engine == '\0')
                engine = NULL;