Tighten SSL library version requirements, more warnings.

This is to emit warnings if the SSL library is older than the latest versions available
at packaging time, except for LibreSSL which is unsupported anyways.

1 files changed, 12 insertions, 8 deletions

diff --git a/socket.c b/socket.c
index bdf70fe3..a6354d5b 100644
--- a/socket.c
+++ b/socket.c
@@ -405,8 +405,6 @@ va_dcl {
 #include <openssl/x509v3.h>
 #include <openssl/rand.h>
 
-#define fm_MIN_OPENSSL_VER 0x1000206fL /* 1.0.2f */
-
 #ifdef LIBRESSL_VERSION_NUMBER 
 # ifdef __OpenBSD__
 #  pragma message "WARNING - Linking against LibreSSL, which is not a supported configuration."
@@ -416,13 +414,19 @@ va_dcl {
 #endif
 
 #ifdef USING_WOLFSSL
-# if LIBWOLFSSL_VERSION_HEX < 0x05001001L
-#  error "FAILED - wolfSSL 5.1.1 or newer required."
-# endif
-#else /* USING_WOLFSSL */
-# if OPENSSL_VERSION_NUMBER < 0x1010100fL
-#  pragma message "WARNING - OpenSSL SHOULD be at least version 1.1.1."
+# if LIBWOLFSSL_VERSION_HEX < 0x05002000L
+#  error "FAILED - wolfSSL MUST be at least version 5.2.0."
 # endif
+#else /* !USING_WOLFSSL */
+#define fm_MIN_OPENSSL_VER 0x1000206fL /* 1.0.2f */
+# if OPENSSL_VERSION_NUMBER <  0x101010efL
+#  pragma message "WARNING - OpenSSL 1.m.nx SHOULD be at least release version 1.1.1n, using " OPENSSL_VERSION_TEXT "."
+# endif                     /* 0xMNN00PPSL */
+# if OPENSSL_VERSION_NUMBER >= 0x30000000L
+#  if OPENSSL_VERSION_NUMBER < 0x30000020L
+#   pragma message "WARNING - OpenSSL 3.m.n SHOULD be at least release version 3.0.2, using " OPENSSL_VERSION_TEXT "."
+#  endif
+# endif                     /* 0xMNN00PPSL */
 # if OPENSSL_VERSION_NUMBER < fm_MIN_OPENSSL_VER
 #  error Your OpenSSL version must be at least 1.0.2f release. Older OpenSSL versions are unsupported.
 # else /* OpenSSL too old */