[openssl-dev] OPENSSL_NO_SHA is still useful?

Richard Moore richmoore44 at gmail.com
Tue Jan 20 23:00:34 UTC 2015


On 20 January 2015 at 21:44, Salz, Rich <rsalz at akamai.com> wrote:

> > you think is still necessary to leave in the code #ifndef OPENSSL_NO_SHA
> > and #ifdef OPENSSL_NO_SHA are so many function calls EVP_sha1() (and
> > other similar) that compiling with -DOPENSSL_NO_SHA gives an endless
> > series of errors and warnings.
>
> Right, it's not useful.  We're looking at cleaning up a whole bunch of
> OPENSSL_NO_xxx options that don't really work.  Details to come.
>

If you're going to change this, then perhaps at the same time as changing
the API these could be inverted so we have defines that say what /is/
enabled since that's probably a better design overall.

Rich.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20150120/c3df181d/attachment.html>


More information about the openssl-dev mailing list