diff options
Diffstat (limited to 'net-nntp/nzbget/files/nzbget-21.1-openssl-3.patch')
| -rw-r--r-- | net-nntp/nzbget/files/nzbget-21.1-openssl-3.patch | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/net-nntp/nzbget/files/nzbget-21.1-openssl-3.patch b/net-nntp/nzbget/files/nzbget-21.1-openssl-3.patch new file mode 100644 index 000000000000..d1d89e9260c0 --- /dev/null +++ b/net-nntp/nzbget/files/nzbget-21.1-openssl-3.patch @@ -0,0 +1,28 @@ +From f76e8555504e3af4cf8dd4a8c8e374b3ca025099 Mon Sep 17 00:00:00 2001 +From: Simon Chopin <simon.chopin@canonical.com> +Date: Tue, 7 Dec 2021 13:23:21 +0100 +Subject: [PATCH] daemon:connect: don't use FIPS_mode_set with OpenSSL 3 + +This function has been removed in OpenSSL 3, replaced by +EVP_default_properties_enable_fips. See +https://www.openssl.org/docs/man3.0/man7/migration_guide.html +--- + daemon/connect/TlsSocket.cpp | 4 ++++ + 1 file changed, 4 insertions(+) + +diff --git a/daemon/connect/TlsSocket.cpp b/daemon/connect/TlsSocket.cpp +index 544bf6850..831da0dc0 100644 +--- a/daemon/connect/TlsSocket.cpp ++++ b/daemon/connect/TlsSocket.cpp +@@ -189,7 +189,11 @@ void TlsSocket::Final() + + #ifdef HAVE_OPENSSL + #ifndef LIBRESSL_VERSION_NUMBER ++#if OPENSSL_VERSION_NUMBER < 0x30000000L + FIPS_mode_set(0); ++#else ++ EVP_default_properties_enable_fips(NULL, 0); ++#endif + #endif + #ifdef NEED_CRYPTO_LOCKING + CRYPTO_set_locking_callback(nullptr); |