[openssl-dev] 1.0.2h Compile fails if OPENSSL_NO_SHA512 is defined

[Rod Falck]

I am defining OPENSSL_NO_SHA512 and get a compilation error in ssl/t1_lib.c:

[08:47:30][Step 3/5]                   c->pkeys[SSL_PKEY_ECC].digest = EVP_sha384();
[08:47:30][Step 3/5]                                                 ^
[08:47:30][Step 3/5] "D:\BuildAgent\sandbox_OpenSSL_NSK_TNSR_Debug\ssl/t1_lib.c", line 902: error(611):
[08:47:30][Step 3/5]           a value of type "int" cannot be assigned to an entity of type
[08:47:30][Step 3/5]           "const EVP_MD *"

The above code does not depend on OPENSSL_NO_SHA512 but EVP_sha384 is does not get declared in evp.h:

# ifndef OPENSSL_NO_SHA512
const EVP_MD *EVP_sha384(void);
const EVP_MD *EVP_sha512(void);
# endif

and therefore defaults to returning int, resulting in the compile error. The function containing error code, tls1_check_cert_param, did not exist in 1.0.1.

For now I have just included the #ifndef, but is that sufficient?

Rod.
--
Rod Falck. Software Architect. comForte Pty Ltd.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20160729/9dc8421b/attachment-0001.html>