Changeset 3725f2d in mod_gnutls

Timestamp:

Jun 18, 2016, 5:30:05 PM (3 years ago)

Author:

Thomas Klute <thomas2.klute@…>

Branches:

debian/master, debian/stretch-backports, master, upstream

Children:

4c529de

Parents:

f1147b6

Message:

Disable OCSP test for GnuTLS 3.5.0

Since 3.5.1 has been released, builds from current git have a
GNUTLS_VERSION_NUMBER > 0x030500 too.

File:

• configure.ac (modified) (2 diffs)

configure.ac

@@ -94 +94 @@
 # openssl is needed as the responder for OCSP tests
 AC_PATH_PROG([OPENSSL], [openssl], [no])
-# OCSP checks with gnutls-cli from GnuTLS versions before 3.3.23 or
-# 3.4.12 fail if intermediate CAs cannot be status checked, even if
-# there are no intermediate CAs like in the mod_gnutls test suite
-# where end entity certificates are directly issued by a root
-# CA. Release 3.5.0 does not contain the fix, but git commit
-# cf09cd11fb7416f2bc8e64876d81bbeaf468fd20 which adds the fix still
-# uses the same version number, so I'm not blocking 0x030500 for the
-# sake of anyone who might be experimenting with the git version.
+# OCSP checks with gnutls-cli from GnuTLS versions before 3.3.23,
+# 3.4.12, or 3.5.1 (on the respective 3.x branch) fail if intermediate
+# CAs cannot be status checked, even if there are no intermediate CAs
+# like in the mod_gnutls test suite where end entity certificates are
+# directly issued by a root CA.
 AC_MSG_CHECKING([for gnutls-cli version supporting OCSP for EE under root CA])
 AC_PREPROC_IFELSE(
@@ -108 +105 @@
                         #error
                         #elif GNUTLS_VERSION_NUMBER >= 0x030400 && GNUTLS_VERSION_NUMBER < 0x03040c
+                        #error
+                        #elif GNUTLS_VERSION_NUMBER == 0x030500
                         #error
                         #endif