CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2015/01/22 02:26:05
Modified files:
usr.sbin/relayd: Makefile relay.c relayd.h
usr.sbin/smtpd : ssl.h
usr.sbin/smtpd/smtpd: Makefile
Removed files:
usr.sbin/relayd: ssl_privsep.c
usr.sbin/smtpd : ssl_privsep.c
Log message:
LibreSSL now supports loading of CA certificates from memory, replace
the internal and long-serving ssl_ctx_load_verify_memory() function
with a call to the SSL_CTX_load_verify_mem() API function. The
ssl_privsep.c file with hacks for using OpenSSL in privsep'ed
processes can now go away; portable versions of smtpd and relayd
should start depending on LibreSSL or they have to carry ssl_privsep.c
in openbsd-compat to work with legacy OpenSSL. No functional change.
Based on previous discussions with gilles@ bluhm@ and many others
OK bluhm@ (as part of the libcrypto/libssl/libtls diff)
