Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Cherry 4.0.x]: Explicitly initialize ssl #1674

Open
wants to merge 2 commits into
base: 4.0.x
Choose a base branch
from

Commits on Oct 4, 2024

  1. chore: remove redundant parenthesis

    Ticket: None
    
    Signed-off-by: Daniel Skinstad Drabitzius <[email protected]>
    (cherry picked from commit a623641)
    danielskinstad authored and Mender committed Oct 4, 2024
    Configuration menu
    Copy the full SHA
    4e6930e View commit details
    Browse the repository at this point in the history
  2. fix: explicitly initialize ssl

    From the OpenSSL man pages:
    Numerous internal OpenSSL functions call OPENSSL_init_ssl().
    Therefore, in order to perform nondefault initialisation,
    OPENSSL_init_ssl() MUST be called by application code prior to any other OpenSSL function calls.
    See: https://docs.openssl.org/3.3/man3/OPENSSL_init_ssl/#description
    
    This fixes errors where e.g. the openssl config configures ssl_conf,
    which requires ssl to be initialized.
    
    Ticket: MEN-7549
    Changelog: Fix error while loading OpenSSL config file, by explicitly
    initializing the SSL context prior to loading. Without the explicit
    initialisation of SSL, the config might not be properly loaded if e.g.
    it has sections specifying ssl settings. This was the case with the
    example configuration for OpenSSL 1.1.1w from Debian Bullseye.
    
    Signed-off-by: Daniel Skinstad Drabitzius <[email protected]>
    (cherry picked from commit 4a3d82b)
    danielskinstad authored and Mender committed Oct 4, 2024
    Configuration menu
    Copy the full SHA
    717ed2a View commit details
    Browse the repository at this point in the history