[CDRIVER-3562] Investigate if we can bump minimum dependent OpenSSL Created: 09/Mar/20  Updated: 28/Oct/23  Resolved: 25/Jan/23

Status: Closed
Project: C Driver
Component/s: tests, tls
Affects Version/s: None
Fix Version/s: 1.24.0

Type: Task Priority: Minor - P4
Reporter: Kevin Albertson Assignee: Ezra Chung
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Related
related to CDRIVER-3668 Support OCSP in older OpenSSL versions Closed
related to PHPC-2314 Require OpenSSL 1.0.1+ in CheckSSL.m4... Closed

 Description   

We test with OpenSSL going back to 0.9.8. But we document a minimum required version of 1.0.1. Can we remove that test?

I suspect we cannot bump to a higher minimum then 1.0.1 (given this comment) but if we can, it may allow us to remove older custom code that newer OpenSSL API has out-of-the-box (e.g. hostname matching with X509_check_host).



 Comments   
Comment by Ezra Chung [ 25/Jan/23 ]

Minimum OpenSSL version is bumped to 1.0.1, dropping tests against 0.9.8 and 1.0.0.

Comment by Githook User [ 25/Jan/23 ]

Author:

{'name': 'Ezra Chung', 'email': '88335979+eramongodb@users.noreply.github.com', 'username': 'eramongodb'}

Message: CDRIVER-3620 Audit compile and test scripts (#1187)

  • Reorder maintainer flags to permit manual disabling of warnings
  • Improve behavior of bypass_dlclose()
  • Add support for add_expansions_to_env to shell_exec
  • Format .codecov.yml
  • Format scripts
  • Sanitize abi-compliance-check.sh
  • Sanitize add-build-dirs-to-paths.sh
  • Sanitize build-and-test-with-toolchain.sh
  • Sanitize compile*.sh scripts
  • Sanitize install-ssl.sh and run*.sh scripts
  • Do not run tests in compile tasks
  • Move all code coverage test-coverage-* tasks
  • Add env-var-utils.sh
  • Use env-var-utils.sh
  • Use nproc to specify Make job count
  • Support linking with custom OpenSSL library without system conflicts
  • CDRIVER-4562 Add SSL_CERT_DIR to resolve cert verify failure with 1.1.0
Generated at Wed Feb 07 21:18:24 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.