Re: Openssl 3.0.0

Hi all,

3 out of 4 of the deprecated functions are now fixed and committed to 
the main branch.

>> tls.c: In function 'tls_start_servertls':
>> tls.c:852:9: warning: 'BIO_set_callback' is deprecated: Since OpenSSL 
>> 3.0 [-Wdeprecated-declarations]
>>    852 |         BIO_set_callback(SSL_get_rbio(tls_conn), bio_dump_cb);
>>        |         ^~~~~~~~~~~~~~~~
> BIO_set_callback_ex() should now be used.
> There are 2 more arguments to deal with in the callback function. 
> Normally not difficult to take into account, I can have a look.

Done, and while updating it I saw that we have a possibility to log 
detailed TLS sessions (in hexadecimal) and more stuff: raise the 
tls_loglevel variable in nnrpd/tls.c to 4 and rebuild INN (the value is 
set to 0 in the source code).
I've added a comment to say the verbosity goes from 0 to 4.

This message is just to let you know in case you weren't aware.

I doubt users need it so I don't plan on making it configurable.
And I confirm it works well.

Oct  3 00:10:34 news nnrpd[256368]: starting TLS engine
Oct  3 00:10:34 news nnrpd[256368]: setting up TLS connection
Oct  3 00:10:34 news nnrpd[256368]: SSL_accept:before SSL initialization
Oct  3 00:10:34 news nnrpd[256368]: read from 55F514614640 
[55F51461F823] (5 bytes => 5 (0x5))
Oct  3 00:10:34 news nnrpd[256368]: 0000 16 03 01 02 57
Oct  3 00:10:34 news nnrpd[256368]: read from 55F514614640 
[55F51461F828] (599 bytes => 599 (0x257))
Oct  3 00:10:34 news nnrpd[256368]: 0000 01 00 02 53 03 03 f5 78|ac 91 
58 d6 6a 61 c9 fe
[...]
Oct  3 00:10:34 news nnrpd[256368]: SSL_accept:TLSv1.3 early data
Oct  3 00:10:34 news nnrpd[256368]: SSL_accept:SSLv3/TLS read finished
Oct  3 00:10:34 news nnrpd[256368]: SSL_accept:SSLv3/TLS write session 
ticket
Oct  3 00:10:34 news nnrpd[256368]: SSL_accept:SSLv3/TLS write session 
ticket
Oct  3 00:10:34 news nnrpd[256368]: starttls: TLSv1.3 with cipher 
TLS_AES_256_GCM_SHA384 (256/256 bits) no authentication
Oct  3 00:10:34 news nnrpd[256368]: read from 55F514614640 
[55F51461F823] (5 bytes => 5 (0x5))
Oct  3 00:10:34 news nnrpd[256368]: 0000 17 03 03 00 1e
[...]

-- 
Julien ÉLIE

« Soldats, du haut de ces pyramides, vingt siècles nous contemplent. »
   (Napoléon)
_______________________________________________
inn-workers mailing list
[email protected]
https://lists.isc.org/mailman/listinfo/inn-workers