[CDRIVER-3544] Test ENABLE_SSL=AUTO and LibreSSL Created: 18/Feb/20  Updated: 28/Oct/23  Resolved: 23/Feb/20

Status: Closed
Project: C Driver
Component/s: libmongoc
Affects Version/s: None
Fix Version/s: 1.17.0-beta, 1.17.0

Type: Bug Priority: Major - P3
Reporter: Kevin Albertson Assignee: Kevin Albertson
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Related
is related to CDRIVER-3541 SSL_OP_NO_RENEGOTIATION undefined in ... Closed

 Description   

The cause of CDRIVER-3541 appears that libmongoc detects an installation of LibreSSL, but interprets it as OpenSSL since it configures with ENABLE_SSL=AUTO. LibreSSL intends to be API compatible with OpenSSL, so I think this is intended behavior (i.e. if a user does not explicitly configure with ENABLE_SSL=LIBRESSL, compile against our OpenSSL code). Our docs also indicate such:

The MongoDB C Driver supports LibreSSL through the use of OpenSSL compatibility checks when configured to compile against openssl. It also supports the new libtls library when configured to build against libressl.

But we do not test compiling against LibreSSL and configuring with ENABLE_SSL=AUTO, which is why we did not detect the bug CDRIVER-3541.

Let's add an evergreen task to test ENABLE_SSL=AUTO and automatically detecting LibreSSL.



 Comments   
Comment by Githook User [ 20/Feb/20 ]

Author:

{'name': 'Kevin Albertson', 'username': 'kevinAlbs', 'email': 'kevin.albertson@mongodb.com'}

Message: CDRIVER-3544 test LibreSSL libssl
Branch: master
https://github.com/mongodb/mongo-c-driver/commit/a7bb10ceb773b8dacc146ea0bb9dc9c55e3aeb9e

Generated at Wed Feb 07 21:18:21 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.