From b875d7deca357afa33f655cc9b9d157f4f217eeb Mon Sep 17 00:00:00 2001 From: Masakazu Kitajo Date: Wed, 17 Nov 2021 13:25:54 +0900 Subject: [PATCH] Set an appropriate callback function for OpenSSL3 --- iocore/net/SSLUtils.cc | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/iocore/net/SSLUtils.cc b/iocore/net/SSLUtils.cc index 8875cb4c17d..40bb070b89e 100644 --- a/iocore/net/SSLUtils.cc +++ b/iocore/net/SSLUtils.cc @@ -746,7 +746,11 @@ ssl_context_enable_tickets(SSL_CTX *ctx, const char *ticket_key_path) // Setting the callback can only fail if OpenSSL does not recognize the // SSL_CTRL_SET_TLSEXT_TICKET_KEY_CB constant. we set the callback first // so that we don't leave a ticket_key pointer attached if it fails. +#ifdef HAVE_SSL_CTX_SET_TLSEXT_TICKET_KEY_EVP_CB + if (SSL_CTX_set_tlsext_ticket_key_evp_cb(ctx, ssl_callback_session_ticket) == 0) { +#else if (SSL_CTX_set_tlsext_ticket_key_cb(ctx, ssl_callback_session_ticket) == 0) { +#endif Error("failed to set session ticket callback"); ticket_block_free(keyblock); return nullptr;