diff options
| author | Mark Michelson <mmichelson@digium.com> | 2016-02-04 16:17:55 -0600 |
|---|---|---|
| committer | Mark Michelson <mmichelson@digium.com> | 2016-02-04 16:57:38 -0600 |
| commit | 6a799cd78f0f26f26afab8b123e04f16c0308c36 (patch) | |
| tree | e99ef58fbfebb3498caba80a6153b9b6cb0e824e /configure.ac | |
| parent | c5e7d5c10587ba19c8f0d56d6f5b291624e9a234 (diff) | |
Check for OpenSSL defines before trying to use them.
The SSL_OP_NO_TLSv1_1 and SSL_OP_NO_TLSv1_2 defines did not exist prior
to OpenSSL version 1.0.1. A recent commit attempts to, by default, set
these options, which can cause problems on systems with older OpenSSL
installations.
This commit adds a configure script check for those defines and will not
attempt to make use of those if they do not exist. We will print a
warning urging the user to upgrade their OpenSSL installation if those
defines are not present.
Change-Id: I6a2eb9a43fd0738b404d8f6f2cf4b5c22d9d752d
Diffstat (limited to 'configure.ac')
| -rw-r--r-- | configure.ac | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/configure.ac b/configure.ac index 54cbab211..63213671f 100644 --- a/configure.ac +++ b/configure.ac @@ -2290,6 +2290,12 @@ then AST_C_DECLARE_CHECK([OPENSSL_ECDH_AUTO], [SSL_CTX_set_ecdh_auto], [openssl/ssl.h]) fi +if test "$PBX_OPENSSL" = "1"; +then + AST_C_DEFINE_CHECK([SSL_OP_NO_TLSV1_1], [SSL_OP_NO_TLSv1_1], [openssl/ssl.h]) + AST_C_DEFINE_CHECK([SSL_OP_NO_TLSV1_2], [SSL_OP_NO_TLSv1_2], [openssl/ssl.h]) +fi + AST_EXT_LIB_CHECK([SRTP], [srtp], [srtp_init], [srtp/srtp.h]) if test "$PBX_SRTP" = "1"; |