Require OpenSSL 1.1.x series 1.1.0g or greater

Previous versions have a bug with EVP_CipherInit() when passed a
NULL EVP_CIPHER, per https://github.com/openssl/openssl/pull/4613

ok dtucker@
This commit is contained in:
Damien Miller 2018-10-17 11:01:20 +11:00
parent 08300c2114
commit aede1c3424

View File

@ -2612,15 +2612,19 @@ if test "x$openssl" = "xyes" ; then
ssl_library_ver=`cat conftest.ssllibver` ssl_library_ver=`cat conftest.ssllibver`
# Check version is supported. # Check version is supported.
case "$ssl_library_ver" in case "$ssl_library_ver" in
10000*|0*) 10000*|0*)
AC_MSG_ERROR([OpenSSL >= 1.0.1 required (have "$ssl_library_ver")]) AC_MSG_ERROR([OpenSSL >= 1.0.1 required (have "$ssl_library_ver")])
;; ;;
100*) ;; # 1.0.x 100*) ;; # 1.0.x
101*) ;; # 1.1.x 101000[0123456]*)
200*) ;; # LibreSSL # https://github.com/openssl/openssl/pull/4613
*) AC_MSG_ERROR([OpenSSL 1.1.x versions prior to 1.1.0g have a bug that breaks their use with OpenSSH (have "$ssl_library_ver")])
AC_MSG_ERROR([OpenSSL > 1.1.x is not yet supported (have "$ssl_library_ver")]) ;;
;; 101*) ;; # 1.1.x
200*) ;; # LibreSSL
*)
AC_MSG_ERROR([OpenSSL > 1.1.x is not yet supported (have "$ssl_library_ver")])
;;
esac esac
AC_MSG_RESULT([$ssl_library_ver]) AC_MSG_RESULT([$ssl_library_ver])
], ],