<pre style='margin:0'>
Perry E. Metzger (pmetzger) pushed a commit to branch master
in repository macports-ports.
</pre>
<p><a href="https://github.com/macports/macports-ports/commit/3f1a5d955d7fb90b59760865d3f97f799e5052e8">https://github.com/macports/macports-ports/commit/3f1a5d955d7fb90b59760865d3f97f799e5052e8</a></p>
<pre style="white-space: pre; background: #F8F8F8"><span style='display:block; white-space:pre;color:#808000;'>commit 3f1a5d955d7fb90b59760865d3f97f799e5052e8
</span>Author: David Gilman <davidgilman1@gmail.com>
AuthorDate: Tue Nov 28 21:01:13 2023 -0500
<span style='display:block; white-space:pre;color:#404040;'> postgresql14: fix openssl 3.2 support
</span>---
databases/postgresql14-doc/Portfile | 2 +
databases/postgresql14/Portfile | 5 +-
databases/postgresql14/files/patch-openssl32.diff | 206 ++++++++++++++++++++++
3 files changed, 211 insertions(+), 2 deletions(-)
<span style='display:block; white-space:pre;color:#808080;'>diff --git a/databases/postgresql14-doc/Portfile b/databases/postgresql14-doc/Portfile
</span><span style='display:block; white-space:pre;color:#808080;'>index b9d5f5bffa6..f4bb53516c0 100644
</span><span style='display:block; white-space:pre;background:#e0e0ff;'>--- a/databases/postgresql14-doc/Portfile
</span><span style='display:block; white-space:pre;background:#e0e0ff;'>+++ b/databases/postgresql14-doc/Portfile
</span><span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -6,6 +6,7 @@ name postgresql14-doc
</span> conflicts postgresql96-doc postgresql10-doc postgresql11-doc postgresql12-doc \
postgresql13-doc
version 14.9
<span style='display:block; white-space:pre;background:#e0ffe0;'>+revision 1
</span> categories databases
platforms darwin
maintainers {jwa @jyrkiwahlstedt}
<span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -35,6 +36,7 @@ configure.args --mandir=${prefix}/share/man \
</span> --without-readline \
--without-zlib
<span style='display:block; white-space:pre;background:#e0ffe0;'>+depends_build port:docbook-xml-4.5 port:docbook-xsl-nons
</span> build.dir ${worksrcpath}/doc
build.type gnu
build.target
<span style='display:block; white-space:pre;color:#808080;'>diff --git a/databases/postgresql14/Portfile b/databases/postgresql14/Portfile
</span><span style='display:block; white-space:pre;color:#808080;'>index e08d5e853f8..4c5adf28bd7 100644
</span><span style='display:block; white-space:pre;background:#e0e0ff;'>--- a/databases/postgresql14/Portfile
</span><span style='display:block; white-space:pre;background:#e0e0ff;'>+++ b/databases/postgresql14/Portfile
</span><span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -9,7 +9,7 @@ PortGroup muniversal 1.0
</span> #remember to update the -doc and -server as well
name postgresql14
version 14.10
<span style='display:block; white-space:pre;background:#ffe0e0;'>-revision 0
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+revision 1
</span>
categories databases
platforms darwin
<span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -36,7 +36,8 @@ checksums rmd160 b2e001d5c5115df81627e6625b2a4549f4fd9ad5 \
</span> use_bzip2 yes
# do not build man or html files (use postgresqlXY-doc instead)
<span style='display:block; white-space:pre;background:#ffe0e0;'>-patchfiles-append patch-no_doc.diff
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+patchfiles-append patch-no_doc.diff \
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ patch-openssl32.diff
</span>
# https://trac.macports.org/ticket/66060
# https://postgrespro.ru/list/thread-id/2551610
<span style='display:block; white-space:pre;color:#808080;'>diff --git a/databases/postgresql14/files/patch-openssl32.diff b/databases/postgresql14/files/patch-openssl32.diff
</span>new file mode 100644
<span style='display:block; white-space:pre;color:#808080;'>index 00000000000..58ab2e95c75
</span><span style='display:block; white-space:pre;background:#ffe0e0;'>--- /dev/null
</span><span style='display:block; white-space:pre;background:#e0e0ff;'>+++ b/databases/postgresql14/files/patch-openssl32.diff
</span><span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -0,0 +1,206 @@
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+From 966d74c19719e4fec6c3542ef5e86f82f83f7053 Mon Sep 17 00:00:00 2001
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+From: Tom Lane <tgl@sss.pgh.pa.us>
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+Date: Tue, 28 Nov 2023 12:34:03 -0500
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+Subject: [PATCH] Use BIO_{get,set}_app_data instead of BIO_{get,set}_data.
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+We should have done it this way all along, but we accidentally got
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+away with using the wrong BIO field up until OpenSSL 3.2. There,
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+the library's BIO routines that we rely on use the "data" field
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+for their own purposes, and our conflicting use causes assorted
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+weird behaviors up to and including core dumps when SSL connections
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+are attempted. Switch to using the approved field for the purpose,
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+i.e. app_data.
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+While at it, remove our configure probes for BIO_get_data as well
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+as the fallback implementation. BIO_{get,set}_app_data have been
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+there since long before any OpenSSL version that we still support,
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+even in the back branches.
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+Also, update src/test/ssl/t/001_ssltests.pl to allow for a minor
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+change in an error message spelling that evidently came in with 3.2.
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+Tristan Partin and Bo Andreson. Back-patch to all supported branches.
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+Discussion: https://postgr.es/m/CAN55FZ1eDDYsYaL7mv+oSLUij2h_u6hvD4Qmv-7PK7jkji0uyQ@mail.gmail.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+---
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ configure | 2 +-
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ configure.ac | 2 +-
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ src/backend/libpq/be-secure-openssl.c | 11 +++--------
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ src/include/pg_config.h.in | 3 ---
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ src/interfaces/libpq/fe-secure-openssl.c | 11 ++++-------
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ src/test/ssl/t/001_ssltests.pl | 4 ++--
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ src/tools/msvc/Solution.pm | 2 --
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ 7 files changed, 11 insertions(+), 24 deletions(-)
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+diff --git configure configure
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+index 49500d61c2..b74f431046 100755
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+--- configure
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++++ configure
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+@@ -13069,7 +13069,7 @@ done
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ # defines OPENSSL_VERSION_NUMBER to claim version 2.0.0, even though it
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ # doesn't have these OpenSSL 1.1.0 functions. So check for individual
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ # functions.
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+- for ac_func in OPENSSL_init_ssl BIO_get_data BIO_meth_new ASN1_STRING_get0_data HMAC_CTX_new HMAC_CTX_free
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++ for ac_func in OPENSSL_init_ssl BIO_meth_new ASN1_STRING_get0_data HMAC_CTX_new HMAC_CTX_free
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ do :
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+diff --git configure.ac configure.ac
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+index 159f2a2677..2a92f7d797 100644
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+--- configure.ac
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++++ configure.ac
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+@@ -1311,7 +1311,7 @@ if test "$with_ssl" = openssl ; then
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ # defines OPENSSL_VERSION_NUMBER to claim version 2.0.0, even though it
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ # doesn't have these OpenSSL 1.1.0 functions. So check for individual
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ # functions.
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+- AC_CHECK_FUNCS([OPENSSL_init_ssl BIO_get_data BIO_meth_new ASN1_STRING_get0_data HMAC_CTX_new HMAC_CTX_free])
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++ AC_CHECK_FUNCS([OPENSSL_init_ssl BIO_meth_new ASN1_STRING_get0_data HMAC_CTX_new HMAC_CTX_free])
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ # OpenSSL versions before 1.1.0 required setting callback functions, for
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ # thread-safety. In 1.1.0, it's no longer required, and CRYPTO_lock()
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ # function was removed.
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+diff --git src/backend/libpq/be-secure-openssl.c src/backend/libpq/be-secure-openssl.c
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+index 13ac961442..e39952494e 100644
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+--- src/backend/libpq/be-secure-openssl.c
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++++ src/backend/libpq/be-secure-openssl.c
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+@@ -823,11 +823,6 @@ be_tls_write(Port *port, void *ptr, size_t len, int *waitfor)
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ * to retry; do we need to adopt their logic for that?
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ */
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+-#ifndef HAVE_BIO_GET_DATA
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+-#define BIO_get_data(bio) (bio->ptr)
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+-#define BIO_set_data(bio, data) (bio->ptr = data)
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+-#endif
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+-
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ static BIO_METHOD *my_bio_methods = NULL;
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ static int
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+@@ -837,7 +832,7 @@ my_sock_read(BIO *h, char *buf, int size)
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ if (buf != NULL)
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ {
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+- res = secure_raw_read(((Port *) BIO_get_data(h)), buf, size);
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++ res = secure_raw_read(((Port *) BIO_get_app_data(h)), buf, size);
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ BIO_clear_retry_flags(h);
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ if (res <= 0)
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ {
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+@@ -857,7 +852,7 @@ my_sock_write(BIO *h, const char *buf, int size)
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ {
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ int res = 0;
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+- res = secure_raw_write(((Port *) BIO_get_data(h)), buf, size);
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++ res = secure_raw_write(((Port *) BIO_get_app_data(h)), buf, size);
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ BIO_clear_retry_flags(h);
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ if (res <= 0)
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ {
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+@@ -933,7 +928,7 @@ my_SSL_set_fd(Port *port, int fd)
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ SSLerr(SSL_F_SSL_SET_FD, ERR_R_BUF_LIB);
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ goto err;
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ }
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+- BIO_set_data(bio, port);
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++ BIO_set_app_data(bio, port);
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ BIO_set_fd(bio, fd, BIO_NOCLOSE);
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ SSL_set_bio(port->ssl, bio, bio);
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+diff --git src/include/pg_config.h.in src/include/pg_config.h.in
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+index 40d513c128..51fa911fb6 100644
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+--- src/include/pg_config.h.in
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++++ src/include/pg_config.h.in
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+@@ -86,9 +86,6 @@
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ /* Define to 1 if you have the `backtrace_symbols' function. */
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ #undef HAVE_BACKTRACE_SYMBOLS
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+-/* Define to 1 if you have the `BIO_get_data' function. */
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+-#undef HAVE_BIO_GET_DATA
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+-
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ /* Define to 1 if you have the `BIO_meth_new' function. */
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ #undef HAVE_BIO_METH_NEW
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+diff --git src/interfaces/libpq/fe-secure-openssl.c src/interfaces/libpq/fe-secure-openssl.c
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+index 7f27767da6..8e2f70a31f 100644
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+--- src/interfaces/libpq/fe-secure-openssl.c
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++++ src/interfaces/libpq/fe-secure-openssl.c
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+@@ -1661,11 +1661,8 @@ PQsslAttribute(PGconn *conn, const char *attribute_name)
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ * to retry; do we need to adopt their logic for that?
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ */
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+-#ifndef HAVE_BIO_GET_DATA
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+-#define BIO_get_data(bio) (bio->ptr)
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+-#define BIO_set_data(bio, data) (bio->ptr = data)
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+-#endif
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++/* protected by ssl_config_mutex */
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ static BIO_METHOD *my_bio_methods;
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ static int
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+@@ -1673,7 +1670,7 @@ my_sock_read(BIO *h, char *buf, int size)
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ {
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ int res;
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+- res = pqsecure_raw_read((PGconn *) BIO_get_data(h), buf, size);
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++ res = pqsecure_raw_read((PGconn *) BIO_get_app_data(h), buf, size);
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ BIO_clear_retry_flags(h);
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ if (res < 0)
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ {
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+@@ -1703,7 +1700,7 @@ my_sock_write(BIO *h, const char *buf, int size)
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ {
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ int res;
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+- res = pqsecure_raw_write((PGconn *) BIO_get_data(h), buf, size);
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++ res = pqsecure_raw_write((PGconn *) BIO_get_app_data(h), buf, size);
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ BIO_clear_retry_flags(h);
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ if (res < 0)
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ {
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+@@ -1794,7 +1791,7 @@ my_SSL_set_fd(PGconn *conn, int fd)
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ SSLerr(SSL_F_SSL_SET_FD, ERR_R_BUF_LIB);
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ goto err;
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ }
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+- BIO_set_data(bio, conn);
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++ BIO_set_app_data(bio, conn);
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ SSL_set_bio(conn->ssl, bio, bio);
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ BIO_set_fd(bio, fd, BIO_NOCLOSE);
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+diff --git src/test/ssl/t/001_ssltests.pl src/test/ssl/t/001_ssltests.pl
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+index 8cdd0d2e68..cc7bd98c83 100644
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+--- src/test/ssl/t/001_ssltests.pl
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++++ src/test/ssl/t/001_ssltests.pl
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+@@ -538,7 +538,7 @@ $node->connect_fails(
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ $node->connect_fails(
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ "$common_connstr user=ssltestuser sslcert=ssl/client-revoked.crt sslkey=ssl/client-revoked_tmp.key",
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ "certificate authorization fails with revoked client cert",
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+- expected_stderr => qr/SSL error: sslv3 alert certificate revoked/,
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++ expected_stderr => qr|SSL error: ssl[a-z0-9/]* alert certificate revoked|,
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ # revoked certificates should not authenticate the user
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ log_unlike => [qr/connection authenticated:/],);
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+@@ -591,7 +591,7 @@ switch_server_cert($node, 'server-cn-only', undef, undef,
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ $node->connect_fails(
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ "$common_connstr user=ssltestuser sslcert=ssl/client-revoked.crt sslkey=ssl/client-revoked_tmp.key",
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ "certificate authorization fails with revoked client cert with server-side CRL directory",
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+- expected_stderr => qr/SSL error: sslv3 alert certificate revoked/);
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++ expected_stderr => qr|SSL error: ssl[a-z0-9/]* alert certificate revoked|);
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ # clean up
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ foreach my $key (@keys)
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+diff --git src/tools/msvc/Solution.pm src/tools/msvc/Solution.pm
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+index 577b5afea7..53d60dbd25 100644
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+--- src/tools/msvc/Solution.pm
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++++ src/tools/msvc/Solution.pm
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+@@ -229,7 +229,6 @@ sub GenerateFiles
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ HAVE_ATOMICS => 1,
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ HAVE_ATOMIC_H => undef,
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ HAVE_BACKTRACE_SYMBOLS => undef,
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+- HAVE_BIO_GET_DATA => undef,
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ HAVE_BIO_METH_NEW => undef,
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ HAVE_CLOCK_GETTIME => undef,
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ HAVE_COMPUTED_GOTO => undef,
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+@@ -562,7 +561,6 @@ sub GenerateFiles
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ || ($digit1 >= '1' && $digit2 >= '1' && $digit3 >= '0'))
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ {
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ $define{HAVE_ASN1_STRING_GET0_DATA} = 1;
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+- $define{HAVE_BIO_GET_DATA} = 1;
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ $define{HAVE_BIO_METH_NEW} = 1;
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ $define{HAVE_HMAC_CTX_FREE} = 1;
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ $define{HAVE_HMAC_CTX_NEW} = 1;
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+--
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+2.42.1
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+
</span></pre><pre style='margin:0'>
</pre>