From e6f04424affb4c16db9d9c65487ed47459abba7f Mon Sep 17 00:00:00 2001 From: Maxim Dounin Date: Thu, 31 Mar 2016 23:38:33 +0300 Subject: SSL: initialization changes for OpenSSL 1.1.0. OPENSSL_config() deprecated in OpenSSL 1.1.0. Additionally, SSL_library_init(), SSL_load_error_strings() and OpenSSL_add_all_algorithms() are no longer available if OPENSSL_API_COMPAT is set to 0x10100000L. The OPENSSL_init_ssl() function is now used instead with appropriate arguments to trigger the same behaviour. The configure test changed to use SSL_CTX_set_options(). Deinitialization now happens automatically in OPENSSL_cleanup() called via atexit(3), so we no longer call EVP_cleanup() and ENGINE_cleanup() directly. --- auto/lib/openssl/conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'auto/lib/openssl/conf') diff --git a/auto/lib/openssl/conf b/auto/lib/openssl/conf index e438050e8..39d960237 100644 --- a/auto/lib/openssl/conf +++ b/auto/lib/openssl/conf @@ -52,7 +52,7 @@ else ngx_feature_incs="#include " ngx_feature_path= ngx_feature_libs="-lssl -lcrypto $NGX_LIBDL" - ngx_feature_test="SSL_library_init()" + ngx_feature_test="SSL_CTX_set_options(NULL, 0)" . auto/feature if [ $ngx_found = no ]; then -- cgit