Re: [PATCH 1/1] src/openssl.c (ssl_check_certificate): Build with -DOPENSSL_NO_DEPRECATED

Thanks, LGTM

Will be merged before the next release.

Regards, Tim

On 2/20/26 8:28 PM, Philip Prindeville via Primary discussion list for=20
GNU Wget wrote:
> From: Philip Prindeville <[email protected]>
>
> ---
>   src/openssl.c | 4 ++++
>   1 file changed, 4 insertions(+)
>
> diff --git a/src/openssl.c b/src/openssl.c
> index 0e16373f85dc463750a75d0cd28122a0e89a62ef..dfcda6027763260998050ece=
735deecfeb8cd8e1 100644
> --- a/src/openssl.c
> +++ b/src/openssl.c
> @@ -1044,7 +1044,11 @@ ssl_check_certificate (int fd, const char *host)
>     if (opt.check_cert =3D=3D CHECK_CERT_QUIET && pinsuccess)
>       return success;
>  =20
> +#ifdef OPENSSL_NO_DEPRECATED_3_0
> +  cert =3D SSL_get1_peer_certificate (conn);
> +#else
>     cert =3D SSL_get_peer_certificate (conn);
> +#endif
>     if (!cert)
>       {
>         logprintf (LOG_NOTQUIET, _("%s: No certificate presented by %s.\=
n"),