On Monday, April 22, 2019, 16:03:25, Eneas U de Queiroz wrote:

> ssl_init fails with openssl 1.1.1 when openssl.cnf is not found.
> Redundant calls to intialization functions were removed as
> OPENSSL_config takes care of them for openssl versions < 1.1.0.
> For versions > 1.1.0, OPENSSL_init_ssl is preferred.

> Signed-off-by: Eneas U de Queiroz <[email protected]>
> ---

> wget currently fails to use SSL with openssl 1.1.1b:
> $ wget https://google.com
> --2019-04-22 10:10:16--  https://google.com/
> Disabling SSL due to encountered errors.

> This may be considered a workaround, as it should not generate the
> error, but it really is an API update, as openssl 1.1.1 deprecated
> OPENSSL_config in favor of OPENSSL_init_crypto anyway.  See
> https://github.com/openssl/openssl/issues/8528

> OPENSSL_init_ssl can be seen as a superset of OPENSSL_init_crypto (it
> calls OPENSSL_init_crypto), and we are already calling it, so we just
> need to pass these flags: OPENSSL_INIT_LOAD_CONFIG to load the
> openssl.cnf file, and OPENSSL_INIT_ENGINE_ALL_BUILTIN to load the
> builtin engines.

Thanks, this fixed the problem I had with the Windows release of
wget 1.20.3.

-- 
< Jernej Simončič ><><><><>< https://eternallybored.org/ >

The most expensive component is the one that breaks.
       -- Law of New Fangled Gadgetry


Reply via email to