Skip to content

Improve OpenSSL 4.0 compatibility, part 1#1005

Open
rhenium wants to merge 5 commits intoruby:masterfrom
rhenium:ky/openssl-4.0-const-part1
Open

Improve OpenSSL 4.0 compatibility, part 1#1005
rhenium wants to merge 5 commits intoruby:masterfrom
rhenium:ky/openssl-4.0-const-part1

Conversation

@rhenium
Copy link
Member

@rhenium rhenium commented Feb 16, 2026

OpenSSL's master branch is going to be OpenSSL 4.0. These functions return const pointers:

  • PKCS7_get_signed_attribute()
  • X509_ATTRIBUTE_get0_object()
  • X509_ATTRIBUTE_get0_type()

@rhenium
Copy link
Member Author

rhenium commented Feb 16, 2026

It seems there have been other changes in OpenSSL master between 2026-02-03 and today. I will check these later.

There is an ongoing effort in OpenSSL's master branch to change a number
of functions to return const pointers.
OpenSSL master added support for RFC 7919 groups in TLS 1.2. They are
preferred over SSLContext#tmp_dh= or #tmp_dh_callback= values if the
client advertises them in the supported_groups extension.
@rhenium rhenium force-pushed the ky/openssl-4.0-const-part1 branch from 9bc8c24 to d37837e Compare February 26, 2026 12:54
@rhenium rhenium changed the title Fix discarding const qualifier with OpenSSL master branch Improve OpenSSL 4.0 compatibility, part 1 Feb 26, 2026
ASN1_STRING has been made opaque in OpenSSL's master branch. Use the
new accessor functions instead of accessing fields directly.
@rhenium rhenium force-pushed the ky/openssl-4.0-const-part1 branch from d37837e to 727c4a7 Compare February 26, 2026 12:56
@rhenium
Copy link
Member Author

rhenium commented Feb 26, 2026

I will not rush merging this until 4.0 alpha is out, as I expect there will be additional breakages, and I want to avoid cluttering the git history with incremental fixes.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant