Re: [Lynx-dev] SSLv23 method gone now

[Thorsten Glaser]

Gisle Vanem dixit:

> +#if (OPENSSL_VERSION_NUMBER >= 0x10100000L)

No. The change is not a property of the version number.
I have OpenSSL 0.9.7 (plus patches…) without SSLv{2,3}.

Index: HTTP.c
===================================================================
RCS file: /cvs/src/gnu/usr.bin/lynx/WWW/Library/Implementation/HTTP.c,v
retrieving revision 1.26
retrieving revision 1.27
diff -u -p -r1.26 -r1.27
--- HTTP.c      13 Mar 2014 04:46:43 -0000      1.26
+++ HTTP.c      4 Jan 2015 22:24:27 -0000       1.27
@@ -124,7 +124,11 @@ SSL *HTGetSSLHandle(void)
        ssl_opts &= ~SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS;
 #endif
        SSLeay_add_ssl_algorithms();
+#if defined(OPENSSL_NO_SSL2) && defined(OPENSSL_NO_SSL3)
+       ssl_ctx = SSL_CTX_new(TLSv1_client_method());
+#else
        ssl_ctx = SSL_CTX_new(SSLv23_client_method());
+#endif
        SSL_CTX_set_options(ssl_ctx, ssl_opts);
        SSL_CTX_set_default_verify_paths(ssl_ctx);
        SSL_CTX_set_verify(ssl_ctx, SSL_VERIFY_PEER, HTSSLCallback);

This should do the trick.

bye,
//mirabilos
-- 
(gnutls can also be used, but if you are compiling lynx for your own use,
there is no reason to consider using that package)
        -- Thomas E. Dickey on the Lynx mailing list, about OpenSSL