https://bugs.openldap.org/show_bug.cgi?id=10498
--- Comment #2 from Simon Pichugin simon.pichugin@gmail.com --- Created attachment 1148 --> https://bugs.openldap.org/attachment.cgi?id=1148&action=edit libldap: more const-correctness for OpenSSL 4
Hi Howard and Rainer,
I tested a599597cb3 against OpenSSL 4. The CN block now builds cleanly. There are still a few related warnings in tls_o.c and autoca.c from the same underlying API change: several X509 getters now return const, and some locals weren't updated to match.
The attached patch covers:
tls_o.c: const-qualify the affected locals in tlso_ca_list, tlso_session_my_dn, tlso_session_peer_dn, the SAN and CN blocks of tlso_session_chkhost, and tlso_verify_cb.
autoca.c: guard the local X509_get_notBefore and X509_get_notAfter macros with #ifndef (OpenSSL 4 defines them itself now), and const-qualify issuer_name.
It's const additions plus one #ifndef guard, no behavior change. I tested the build on Fedora with our 389 Directory Server - all good!
Thanks, Simon