mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-09-04 08:35:31 +00:00
Code Issues Releases Wiki Activity

Windows specific compile time test for:

Browse Source 
2089.   [security]      Raise the minimum safe OpenSSL versions to
                        OpenSSL 0.9.7l and OpenSSL 0.9.8d.  Versions
                        prior to these have known security flaws which
                        are (potentially) exploitable in named. [RT #16391]
This commit is contained in:
Mark Andrews
2006-10-11 02:15:59 +00:00
parent 5b356953d7
commit 0695629678
1 changed files with 14 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
lib/dns/opensslrsa_link.c
View File

@@ -17,7 +17,7 @@
/* /*
* Principal Author: Brian Wellington * Principal Author: Brian Wellington
* $Id: opensslrsa_link.c,v 1.9 2006/10/10 02:30:10 marka Exp $ * $Id: opensslrsa_link.c,v 1.10 2006/10/11 02:15:59 marka Exp $
*/ */
#ifdef OPENSSL #ifdef OPENSSL
@@ -43,6 +43,19 @@
#include <openssl/bn.h> #include <openssl/bn.h>
#endif #endif
/*
* We don't use configure for windows so enforce the OpenSSL version
* here. Unlike with configure we don't support overriding this test.
*/
#ifdef WIN
#if !((OPENSSL_VERSION_NUMBER >= 0x009070cfL && \
OPENSSL_VERSION_NUMBER < 0x009080000L) || \
OPENSSL_VERSION_NUMBER >= 0x0090804fL)
#error Please upgrade OpenSSL to 0.9.8d/0.9.7l or greater.
#endif
#endif
/* /*
* XXXMPA Temporarially disable RSA_BLINDING as it requires * XXXMPA Temporarially disable RSA_BLINDING as it requires
* good quality random data that cannot currently be guarenteed. * good quality random data that cannot currently be guarenteed.