Re: Build issue with OpenSSL >= 4.0

Am 28.06.26 um 23:26 schrieb Alejandro Colomar via Mutt-dev:
> Hi Dennis,
>
> On 2026-06-28T22:44:45+0200, Dennis Preiser wrote:
>> On Sun, Jun 28, 2026 at 06:56:14PM +0200, Matthias Andree via Mutt-dev =
wrote:
>>> Thanks. Regarding the #ifdefs, wouldn't the accessor functions also wo=
rk on
>>> older OpenSSL releases, too, so that mutt could switch to the accessor=
 API
>>> wholesale?
>> I'm not really familiar with OpenSSL, so I played it safe.
>>
>> According to <https://docs.openssl.org/1.0.2/man3/ASN1_STRING_length/>,
>> ASN1_STRING_length() has been available since at least version 1.0.2,
>> and ASN1_STRING_get0_data() since at least version 1.1.1
>> <https://docs.openssl.org/1.1.1/man3/ASN1_STRING_length/>.
>>
>> LibreSSL dates back to July 2014 (2.0.0), which would be before OpenSSL
>> 1.0.2 (January 2015). I haven=C2=B4t been able to find online when thes=
e two
>> functions became available in LibreSSL.
> 	alx@devuan:/tmp/openbsd$ git ref aeeae06a7981
> 	aeeae06a7981 (1998-10-05; "Import of SSLeay-0.9.0b with RSA and IDEA st=
ubbed + OpenBSD build functionality for shared libs.")
> 	alx@devuan:/tmp/openbsd$ git show aeeae06a7981 | grep ASN1_STRING_lengt=
h
> 	+#define ASN1_STRING_length(x)	((x)->length)
> 	+	ret=3DASN1_STRING_length(a->value.octet_string);
> 	+	ASN1_STRING_length(osp)=3Dsize;
> 	+	length=3DASN1_STRING_length(a->value.sequence);
> 	+	ret=3DASN1_STRING_length(os);
> 	alx@devuan:/tmp/openbsd$ git ref 203972bb77b5
> 	203972bb77b5 (2018-02-14; "Provide ASN1_STRING_get0_data().")
> 	alx@devuan:/tmp/openbsd$ git show 203972bb77b5 | grep ASN1_STRING_get0_=
data
> 	    Provide ASN1_STRING_get0_data().
> 	+ASN1_STRING_get0_data
> 	+const unsigned char *ASN1_STRING_get0_data(const ASN1_STRING *x);
> 	+ASN1_STRING_get0_data(const ASN1_STRING *x)
> 	alx@devuan:/tmp/openbsd$ git describe --contains 203972bb77b5
> 	libressl-v2.7.0~266
> 	alx@devuan:/tmp/openbsd$ git describe --contains aeeae06a7981
> 	OPENBSD_2_6_BASE~147^2
>
> ASN1_STRING_length() seems to be there since forever, while
> ASN1_STRING_get0_data() was added recently (2018; libressl-v2.7.0).

Why is LibreSSL a thing now? (not only in Alex's mail) OpenSSL 1.x is=20
EOL, and LibreSSL is, by and large, an OpenBSD thing because there it=20
can be argued to be part of the operating system so that its license=20
does not interfere. In my open source stuff I stopped caring for=20
antediluvian OpenSSL APIs. Support OpenSSL >=3D 3.5 and as long as you=20
don't do too fancy stuff OpenBSD's, LibreSSL will cope.

=2D-=20
Matthias Andree