Commit be68c1fb authored by Nick Mathewson's avatar Nick Mathewson 🥔
Browse files

Log a notice if we're running with OpenSSL before 1.0.0. 

These versions have some dubious, slow crypto implementations; 1.0.0
is a great improvement, and at this point is pretty mature.
parent feabf414

src/common/crypto.c

+5 −0
Original line number Diff line number Diff line
@@ -243,6 +243,11 @@ crypto_global_init(int useAccel, const char *accelName, const char *accelDir) 
               SSLeay(), SSLeay_version(SSLEAY_VERSION));

    }



    if (SSLeay() < OPENSSL_V_SERIES(1,0,0)) {

      log_notice(LD_CRYPTO, "Your OpenSSL version seems to be %s. We "

                 "recommend 1.0.0 or later.", crypto_openssl_get_version_str());

    }



    if (useAccel > 0) {

#ifdef DISABLE_ENGINES

      (void)accelName;