Fossil

Differences From Artifact [de5e6b0ab8]:

• File src/http_ssl.c — part of check-in [af8109c00d] at 2021-11-02 15:52:24 on branch trunk — Work around a warning in older versions of OpenSSL (e.g. 1.0.2g) where ASN1_time_check() is declared with a non-const ASN1_TIME* parameter. (user: danield size: 20795)

To Artifact [3b47015114]:

• File src/http_ssl.c — part of check-in [8c1263754c] at 2021-11-05 15:54:12 on branch trunk — Remove OpenSSL initialization call that is not needed and which is deprecated in newer versions of OpenSSL. (user: drh size: 20767) [more...]

139
140
141
142
143
144
145
146
147
148
149
150
151
152
153

void ssl_global_init(void){
  const char *zCaSetting = 0, *zCaFile = 0, *zCaDirectory = 0;
  const char *identityFile;

  if( sslIsInit==0 ){
    SSL_library_init();
    SSL_load_error_strings();
    ERR_load_BIO_strings();
    OpenSSL_add_all_algorithms();
    sslCtx = SSL_CTX_new(SSLv23_client_method());
    /* Disable SSLv2 and SSLv3 */
    SSL_CTX_set_options(sslCtx, SSL_OP_NO_SSLv2|SSL_OP_NO_SSLv3);

    /* Set up acceptable CA root certificates */
    zCaSetting = db_get("ssl-ca-location", 0);

<

139
140
141
142
143
144
145

146
147
148
149
150
151
152

void ssl_global_init(void){
  const char *zCaSetting = 0, *zCaFile = 0, *zCaDirectory = 0;
  const char *identityFile;

  if( sslIsInit==0 ){
    SSL_library_init();
    SSL_load_error_strings();

    OpenSSL_add_all_algorithms();
    sslCtx = SSL_CTX_new(SSLv23_client_method());
    /* Disable SSLv2 and SSLv3 */
    SSL_CTX_set_options(sslCtx, SSL_OP_NO_SSLv2|SSL_OP_NO_SSLv3);

    /* Set up acceptable CA root certificates */
    zCaSetting = db_get("ssl-ca-location", 0);