aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMatthias Andree <matthias.andree@gmx.de>2016-12-11 17:58:08 +0100
committerMatthias Andree <matthias.andree@gmx.de>2016-12-11 17:59:09 +0100
commitb1e81d36e5a324d1e5257de396a3ff8ff99f71ca (patch)
tree5c62a3b19bcea61c7bc7a2b74035ec3b0f9a4e1e
parent4a57a63458ba2c0c11fdcd24f6cf2fc15957135a (diff)
downloadfetchmail-b1e81d36e5a324d1e5257de396a3ff8ff99f71ca.tar.gz
fetchmail-b1e81d36e5a324d1e5257de396a3ff8ff99f71ca.tar.bz2
fetchmail-b1e81d36e5a324d1e5257de396a3ff8ff99f71ca.zip
Bump OpenSSL requirement to v1.0.2.
-rw-r--r--NEWS2
-rw-r--r--README.SSL2
-rw-r--r--socket.c4
3 files changed, 4 insertions, 4 deletions
diff --git a/NEWS b/NEWS
index bc1f75f3..762cc738 100644
--- a/NEWS
+++ b/NEWS
@@ -89,7 +89,7 @@ fetchmail-6.4.0 (not yet released):
## CHANGES
* fetchmail 6.3.X is unsupported.
-* fetchmail now requires OpenSSL v1.0.1 or newer.
+* fetchmail now requires OpenSSL v1.0.2 or newer.
* fetchmail now configures OpenSSL support by default.
* Fetchmail now supports --sslproto auto and --sslproto tls1+ (same as ssl23).
* --sslproto tls1.1+ and tls1.2+ are now supported for auto-negotiation with a
diff --git a/README.SSL b/README.SSL
index 92973a2d..027b4c69 100644
--- a/README.SSL
+++ b/README.SSL
@@ -28,7 +28,7 @@ and v3 are broken.
Quickstart
----------
-Use an up-to-date release of OpenSSL 1.0.1 or newer, so as to get
+Use an up-to-date release of OpenSSL 1.0.2 or newer, so as to get
TLSv1.2 support. Older OpenSSL versions are unsupported upstream, and
fetchmail rejects them.
diff --git a/socket.c b/socket.c
index 8aefa404..1fe63012 100644
--- a/socket.c
+++ b/socket.c
@@ -378,10 +378,10 @@ va_dcl {
#include <openssl/x509v3.h>
#include <openssl/rand.h>
-#define fm_MIN_OPENSSL_VER 0x1000100fL
+#define fm_MIN_OPENSSL_VER 0x1000200fL
#if OPENSSL_VERSION_NUMBER < fm_MIN_OPENSSL_VER
-#error Your OpenSSL version must be at least 1.0.1 release. Older OpenSSL versions are unsupported.
+#error Your OpenSSL version must be at least 1.0.2 release. Older OpenSSL versions are unsupported.
#else
/*
#define __fm_ossl_ver(x) #x