Hi,
On Mon, Jun 4, 2018 at 2:23 PM, <acl...@yepmail.net> wrote:
> On 5/31/18 10:33 PM, Selva Nair wrote:
> > OpenVPN still supports openssl 1.0 and you can't build with api
> > restricted to 1.1. At least not yet. So it will build only if you use
> > the "default build" of OpenSSL 1.1. And should build with 1.1
> > lib/headers in major distributions -- if not, there is a problem.
>
> The "default build" does NOT include the deprecated functions:
>
> https://wiki.openssl.org/index.php/OpenSSL_1.1.0_Changes
Quoting from that page (emphasis mine).
"Various functions get deprecated as other interfaces get added, but *are
still available in a default build*. The include files support setting the
OPENSSL_API_COMPAT define that will hide functions that are deprecated in
the selected version. To select the 1.1.0 version use
-DOPENSSL_API_COMPAT=0x10100000L. "
And that's what I mean by default build. In other words, if you configure
openssl as "./Configure" leaving all options at their defaults what you get
is the default build. AFAIK OpenVPN compiles and links against such a
build. Use of -DOPENSSL_API_COMPAT=0x10100000L is not yet supported.
Selva
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel
