Re: [Lynx-dev] SSL certificate validation support *broken* in 2.8.7dev.7

[Thorsten Glaser]

Thomas Dickey dixit:

> I recall some problem with the X509 definition, but it did work on my machine
> (unsure about portability though...)
>
>>
>> $ fgrep -n USE_OPENSSL_INCL configure
>> 11076:#if defined(USE_OPENSSL_INCL)
>> 11202:#if defined(USE_OPENSSL_INCL)
>> 11265:#if defined(USE_OPENSSL_INCL)
>> 11382:#if defined(USE_OPENSSL_INCL)
>
> btw, not all of the places where grep shows the string are pertinent,
> since I used one macro to expand the sample code for all of the SSL
> configurations (including GNU TLS).

Yeah, I saw that. Should be ok with the diff below.

$MirOS$
--- aclocal.m4.orig     Thu Aug  2 23:24:04 2007
+++ aclocal.m4  Mon Aug 13 13:37:22 2007
@@ -1407,7 +1407,7 @@ AC_DEFUN([CF_CHECK_SSL_X509],[
 AC_MSG_CHECKING(for X509 support)
 AC_TRY_LINK(CF__SSL_HEAD [
 #include <openssl/x509.h>],
-       [X509_verify_cert_error_string(X509_STORE_CTX_get_error(X509_STORE_CTX 
*0))],
+       [X509_verify_cert_error_string(X509_STORE_CTX_get_error(NULL))],
        [cf_x509_support=yes],
        [cf_x509_support=no])
 AC_MSG_RESULT($cf_x509_support)
@@ -4246,11 +4246,11 @@ AC_DEFUN([CF_SSL],[
       esac
 
     fi
-    CF_CHECK_SSL_X509
     if test -n "$cf_cv_library_path_ssl" ; then
       CF_ADD_LIBDIR($cf_cv_library_path_ssl)
     fi
     LIBS="-lssl -lcrypto $LIBS"
+    CF_CHECK_SSL_X509
   fi
 ])dnl
 dnl ---------------------------------------------------------------------------

//mirabilos
-- 
I believe no one can invent an algorithm. One just happens to hit upon it
when God enlightens him. Or only God invents algorithms, we merely copy them.
If you don't believe in God, just consider God as Nature if you won't deny
existence.              -- Coywolf Qi Hunt