diff options
| author | Kazuki Yamaguchi <[email protected]> | 2025-01-22 03:22:22 +0900 |
|---|---|---|
| committer | Kazuki Yamaguchi <[email protected]> | 2025-01-23 01:45:52 +0900 |
| commit | 495b1cad042b30c40b62b5ecea5a728ea3c2f4ac (patch) | |
| tree | d73daa96220df790bf8c572ae1004bce14da70c0 /ext/openssl/openssl_missing.h | |
| parent | 87316d58faa2d57e9f1c1df2f76584a129a60bcc (diff) | |
[ruby/openssl] ts: use TS_VERIFY_CTX_set0_{store,certs}() on OpenSSL 3.4
In OpenSSL 3.4, TS_VERIFY_CTX_set_certs() and TS_VERIFY_CTX_set_store()
are deprecated in favor of the new functions with "set0" in the names.
The new functions have a slightly different behavior. They will free the
previous value automatically. Increment the reference counter of
X509_STORE before setting it to TS_VERIFY_CTX, and do not try to
manually unset it.
We avoided doing this to work around a bug that was present in older
versions of OpenSSL, which has now been fixed in OpenSSL 1.0.2 by commit
https://github.com/openssl/openssl/commit/bff9ce4db38b.
https://github.com/ruby/openssl/commit/ce37f7d93a
Diffstat (limited to 'ext/openssl/openssl_missing.h')
| -rw-r--r-- | ext/openssl/openssl_missing.h | 4 |
1 files changed, 0 insertions, 4 deletions
diff --git a/ext/openssl/openssl_missing.h b/ext/openssl/openssl_missing.h index eb5eaa6cf9..6592f9ccea 100644 --- a/ext/openssl/openssl_missing.h +++ b/ext/openssl/openssl_missing.h @@ -13,10 +13,6 @@ #include "ruby/config.h" /* added in 3.0.0 */ -#if !defined(HAVE_TS_VERIFY_CTX_SET_CERTS) -# define TS_VERIFY_CTX_set_certs(ctx, crts) TS_VERIFY_CTS_set_certs(ctx, crts) -#endif - #ifndef HAVE_EVP_MD_CTX_GET0_MD # define EVP_MD_CTX_get0_md(ctx) EVP_MD_CTX_md(ctx) #endif |