From 4f33157ffa34735c9bb702f1bb71e58b65095ba0 Mon Sep 17 00:00:00 2001
From: Ruediger Pluem <rpluem@apache.org>
Date: Fri, 5 Jul 2024 14:50:24 +0000
Subject: * Check for correct OpenSSL version for mod_ssl_ct

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1918935 13f79535-47bb-0310-9956-ffa450edef68
---
 modules/ssl/config.m4 | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

(limited to 'modules')

diff --git a/modules/ssl/config.m4 b/modules/ssl/config.m4
index 8b756b011c..687368aaef 100644
--- a/modules/ssl/config.m4
+++ b/modules/ssl/config.m4
@@ -54,7 +54,17 @@ APR_ADDTO(INCLUDES, [-I\$(top_srcdir)/$modpath_current])
 
 ssl_ct_objs="mod_ssl_ct.lo ssl_ct_log_config.lo ssl_ct_sct.lo ssl_ct_util.lo"
 APACHE_MODULE(ssl_ct, [Support for Certificate Transparency (RFC 6962)], $ssl_ct_objs, , no, [
-    dnl TODO: Check for OpenSSL >= 1.0.2
+    AC_MSG_CHECKING([for OpenSSL version >= 1.0.2])
+    AC_TRY_COMPILE([#include <openssl/opensslv.h>],[
+#if !defined(OPENSSL_VERSION_NUMBER)
+#error "Missing OpenSSL version"
+#endif
+#if OPENSSL_VERSION_NUMBER < 0x10002003L
+#error "Unsupported OpenSSL version " OPENSSL_VERSION_TEXT
+#endif],
+      [AC_MSG_RESULT(yes)],
+      [AC_MSG_ERROR([mod_ssl_ct requires OpenSSL 1.0.2-beta3 or later.])])
+
     if test "$enable_ssl" = "no"; then
         AC_MSG_ERROR([mod_ssl_ct is dependent on mod_ssl, which is not enabled.])
     fi
-- 
cgit v1.2.3