[OpenWrt-Devel] [PATCH] openvpn: openssl: explicitly depend on deprecated APIs

Magnus Kroken mkroken at gmail.com
Tue Apr 2 16:18:44 EDT 2019

OpenVPN as of 2.4.7 uses some OpenSSL APIs that are deprecated in
OpenSSL >= 1.1.0.

Signed-off-by: Magnus Kroken <mkroken at gmail.com>
Thank you Rosen Penev for pointing this out.

As OpenSSL is built with deprecated APIs by default in OpenWrt
at the moment, I assume this will be the case for the 19.0x release,
and that this dependency is acceptable at the moment. Upstream is 
aware of the situation, but has not accepted patches at the moment.

 package/network/services/openvpn/Makefile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/package/network/services/openvpn/Makefile b/package/network/services/openvpn/Makefile
index e5bd80649a..e1ef88d576 100644
--- a/package/network/services/openvpn/Makefile
+++ b/package/network/services/openvpn/Makefile
@@ -45,7 +45,7 @@ else
-Package/openvpn-openssl=$(call Package/openvpn/Default,openssl,OpenSSL,+PACKAGE_openvpn-openssl:libopenssl)
+Package/openvpn-openssl=$(call Package/openvpn/Default,openssl,OpenSSL,+PACKAGE_openvpn-openssl:libopenssl + at OPENSSL_WITH_DEPRECATED) 
 Package/openvpn-mbedtls=$(call Package/openvpn/Default,mbedtls,mbedTLS,+PACKAGE_openvpn-mbedtls:libmbedtls)
 Package/openvpn-nossl=$(call Package/openvpn/Default,nossl,plaintext (no SSL))

openwrt-devel mailing list
openwrt-devel at lists.openwrt.org

More information about the openwrt-devel mailing list