Skip to content

Commit 075b68e

Browse files
committed
ocsp: disable OCSP_basic_verify() workaround on LibreSSL 3.5
The workaround is not needed on LibreSSL 3.5. LibreSSL 3.5 at the same time made the structure opaque, so it does not compile. This is a patch to the 2.2 branch; the code no longer exists in v3.0.
1 parent 7407e3f commit 075b68e

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

ext/openssl/ossl_ocsp.c

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1069,7 +1069,8 @@ ossl_ocspbres_verify(int argc, VALUE *argv, VALUE self)
10691069
x509st = GetX509StorePtr(store);
10701070
flg = NIL_P(flags) ? 0 : NUM2INT(flags);
10711071
x509s = ossl_x509_ary2sk(certs);
1072-
#if (OPENSSL_VERSION_NUMBER < 0x1000202fL) || defined(LIBRESSL_VERSION_NUMBER)
1072+
#if (OPENSSL_VERSION_NUMBER < 0x1000202fL) || \
1073+
defined(LIBRESSL_VERSION_NUMBER) && LIBRESSL_VERSION_NUMBER < 0x30500000
10731074
/*
10741075
* OpenSSL had a bug that it doesn't use the certificates in x509s for
10751076
* verifying the chain. This can be a problem when the response is signed by

0 commit comments

Comments
 (0)