diff options
author | Matthias Andree <matthias.andree@gmx.de> | 2021-11-20 14:40:55 +0100 |
---|---|---|
committer | Matthias Andree <matthias.andree@gmx.de> | 2021-11-20 16:28:41 +0100 |
commit | 8fcffe46b231ddcc0305a36bf7f9aaf27c7e1a50 (patch) | |
tree | e0de0d444a5d9a81a39c368473ac9967c26a36c3 /socket.c | |
parent | 340d00bf9910ed55163be26435f70baf65a64f9d (diff) | |
download | fetchmail-8fcffe46b231ddcc0305a36bf7f9aaf27c7e1a50.tar.gz fetchmail-8fcffe46b231ddcc0305a36bf7f9aaf27c7e1a50.tar.bz2 fetchmail-8fcffe46b231ddcc0305a36bf7f9aaf27c7e1a50.zip |
OpenSSL: bump minimum required version to 1.0.2f
...in order to safely remove the obsolete OpenSSL flag
SSL_OP_SINGLE_DH_USE.
Diffstat (limited to 'socket.c')
-rw-r--r-- | socket.c | 6 |
1 files changed, 3 insertions, 3 deletions
@@ -406,7 +406,7 @@ va_dcl { #include <openssl/x509v3.h> #include <openssl/rand.h> -#define fm_MIN_OPENSSL_VER 0x1000200fL +#define fm_MIN_OPENSSL_VER 0x1000206fL /* 1.0.2f */ #ifdef LIBRESSL_VERSION_NUMBER #error "FAILED - LibreSSL cannot be used legally, for lack of GPL clause 2b exception, see COPYING." @@ -417,7 +417,7 @@ va_dcl { #endif #if OPENSSL_VERSION_NUMBER < fm_MIN_OPENSSL_VER -#error Your OpenSSL version must be at least 1.0.2 release. Older OpenSSL versions are unsupported. +#error Your OpenSSL version must be at least 1.0.2f release. Older OpenSSL versions are unsupported. #else /* #define __fm_ossl_ver(x) #x @@ -1079,7 +1079,7 @@ int SSLOpen(int sock, char *mycert, char *mykey, const char *myproto, int certck struct stat randstat; int i; int avoid_ssl_versions = SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3; - long sslopts = SSL_OP_ALL | SSL_OP_SINGLE_DH_USE; + long sslopts = SSL_OP_ALL; int ssle_connect = 0; long ver; |