lynx-dev
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Lynx-dev] SSLv23 method gone now


From: Gisle Vanem
Subject: [Lynx-dev] SSLv23 method gone now
Date: Tue, 19 May 2015 16:47:23 +0200
User-agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:36.0) Gecko/20100101 Firefox/36.0 SeaMonkey/2.33.1

Seems OpenSSL is now moving ahead so fast it's breaking a
lot of applications. Now on Lynx/MSVC:
  www.lib(HTTP.obj) : error LNK2019: unresolved external symbol 
_SSLv23_client_method
  referenced in function _HTGetSSLHandle

What's the best fix for this now?

I just did this w/o actually knowing OpenSSL that well:

--- orig/WWW/Library/Implementation/http.c      2015-05-07 02:56:19 +0000
+++ WWW/Library/Implementation/http.c   2015-05-19 16:42:37 +0000
@@ -173,7 +173,11 @@
        X509_set_default_verify_paths(ssl_ctx->cert);
 #else
        SSLeay_add_ssl_algorithms();
+#if (OPENSSL_VERSION_NUMBER >= 0x10100000L)
+       ssl_ctx = SSL_CTX_new(TLSv1_client_method());
+#else
        ssl_ctx = SSL_CTX_new(SSLv23_client_method());
+#endif
 #ifdef SSL_OP_NO_SSLv2
        SSL_CTX_set_options(ssl_ctx, SSL_OP_ALL | SSL_OP_NO_SSLv2);
 #else

---------------

But it seems to work. From:
  lynx https://www.ssllabs.com/ssltest/viewMyClient.html

Protocol Features
Protocols
 TLS 1.2 No
 TLS 1.1 No
 TLS 1.0 Yes*
 SSL 3   Yes*
 SSL 2   No

--
--gv



reply via email to

[Prev in Thread] Current Thread [Next in Thread]