suppress gnu TLS and mbed TLS version checks

   Prevent bailing when the exact compile-time and runtime GNU TLS versions
   differ; trust dpkg to disallow combinations that are actually incompatible.
   Likewise for mbed TLS.

Gbp-Pq: Name suppress_tls_version_checks

diff --git a/c++/src/connect/ncbi_gnutls.c b/c++/src/connect/ncbi_gnutls.c
index 2391fbe48b081d804f77a560884e405c57d03f51..e3d9b7e6edda3e491936a030ed3038e00cc3688a 100644 (file)
--- a/c++/src/connect/ncbi_gnutls.c
+++ b/c++/src/connect/ncbi_gnutls.c
@@ -769,6 +769,7 @@ static EIO_Status s_GnuTlsInit(FSSLPull pull, FSSLPush push)
 
     CORE_TRACE("GnuTlsInit(): Enter");
 
+#if 0
     version = gnutls_check_version(0);
     if (strcasecmp(GNUTLS_VERSION, version) != 0) {
         CORE_LOGF_X(26, eLOG_Critical,
@@ -776,6 +777,7 @@ static EIO_Status s_GnuTlsInit(FSSLPull pull, FSSLPush push)
                      GNUTLS_VERSION, version));
         assert(0);
     }
+#endif
 
     if (!pull  ||  !push) {
         status = eIO_InvalidArg;

diff --git a/c++/src/connect/ncbi_mbedtls.c b/c++/src/connect/ncbi_mbedtls.c
index 19db747a641c10c698f999f0df209778a6f6b1ef..006a20fdba71ab8245cbbeec84760a37ac70e7a3 100644 (file)
--- a/c++/src/connect/ncbi_mbedtls.c
+++ b/c++/src/connect/ncbi_mbedtls.c
@@ -770,12 +770,14 @@ static EIO_Status s_MbedTlsInit(FSSLPull pull, FSSLPush push)
     CORE_TRACE("MbedTlsInit(): Enter");
 
     mbedtls_version_get_string(version);
+#if 0
     if (strcasecmp(MBEDTLS_VERSION_STRING, version) != 0) {
         CORE_LOGF_X(5, eLOG_Critical,
                     ("%s version mismatch: %s headers vs. %s runtime",
                      kMbedTls, MBEDTLS_VERSION_STRING, version));
         assert(0);
     }
+#endif
 
     if (!pull  ||  !push) {
         status = eIO_InvalidArg;