[gambit-list] Problems with Gambit OpenSSL support
Marc Feeley
feeley at iro.umontreal.ca
Wed Sep 19 08:33:58 EDT 2018
Thank you for your interest in the SSL support. Could you please submit an issue on the github repository so we can keep track of this issue?
Marc
> On Sep 19, 2018, at 6:41 AM, Timo Myyrä <timo.myyra at bittivirhe.fi> wrote:
>
> timo.myyra at bittivirhe.fi (Timo Myyrä) writes:
>
>> Hi,
>>
>> I've encountered two different issues with Gambits OpenSSL use.
>>
>> First issue is that it doesn't seem to work with LibreSSL. I tested this on my
>> OpenBSD-current and Gambit compiles just fine but tls support doesn't seem to work:
>> $ gsi
>> Gambit v4.9.0
>>
>>> (make-tls-context)
>> *** ERROR IN (console)@1.1 --
>> (make-tls-context)
>> 1>
>>
>> Any methods to get further details on what error happened here? LibreSSL should
>> have API compatibility with OpenSSL 1.0.1. Which API the Gambit uses? I asked
>> around on voidlinux IRC and same issue seems to be happening there as
>> well. Void Linux also uses LibreSSL.
>>
>> Another issue I noticed that the Gambit fails to compile at all when its
>> configured with '--enable-openssl' on system using OpenSSL 1.1.0. I tested it
>> with Slackware64-current and it broke on compilation failing to find some SSL
>> context structure. eems there are API changes in later OpenSSL versions which
>> Gambit can't handle currently. Could the docs be updated so that those include
>> which OpenSSL versions should work.
>>
>> Timo
>> _______________________________________________
>> Gambit-list mailing list
>> Gambit-list at iro.umontreal.ca
>> https://mailman.iro.umontreal.ca/cgi-bin/mailman/listinfo/gambit-list
>
> Ah, seems the latter issue is already fixed in the master branch, backported the
> openssl 1.1.0 diff from it to Slackware and it fixed tls operations on it.
>
> While testing the diff I noticed it seems to have small flaw, its comparing
> probably wrong arguments:
>
> https://github.com/gambit/gambit/blob/master/lib/os_io.c#L4205
> That line should probably be "if (bp == NULL || bg == NULL)".
>
> Haven't made any progress on finding whats breaking the LibreSSL though.
>
> timo
> _______________________________________________
> Gambit-list mailing list
> Gambit-list at iro.umontreal.ca
> https://mailman.iro.umontreal.ca/cgi-bin/mailman/listinfo/gambit-list
More information about the Gambit-list
mailing list