From: Aaron M. Ucko <ucko@debian.org>
Date: Thu, 2 Dec 2021 03:08:16 +0000 (-0500)
Subject: suppress gnu TLS and mbed TLS version checks
X-Git-Tag: archive/raspbian/2.17.0+ds-6+rpi1^2~10
X-Git-Url: https://dgit.raspbian.org/%22http://www.example.com/cgi/%22/%22http:/www.example.com/cgi/%22?a=commitdiff_plain;h=ad530e60ebe7060ad689eedb2f62667048a75a49;p=ncbi-blast%2B.git

suppress gnu TLS and mbed TLS version checks


   Prevent bailing when the exact compile-time and runtime GNU TLS versions
   differ; trust dpkg to disallow combinations that are actually incompatible.
   Likewise for mbed TLS.

Gbp-Pq: Name suppress_tls_version_checks
---

diff --git a/c++/src/connect/ncbi_gnutls.c b/c++/src/connect/ncbi_gnutls.c
index 2391fbe4..e3d9b7e6 100644
--- a/c++/src/connect/ncbi_gnutls.c
+++ b/c++/src/connect/ncbi_gnutls.c
@@ -769,6 +769,7 @@ static EIO_Status s_GnuTlsInit(FSSLPull pull, FSSLPush push)
 
     CORE_TRACE("GnuTlsInit(): Enter");
 
+#if 0
     version = gnutls_check_version(0);
     if (strcasecmp(GNUTLS_VERSION, version) != 0) {
         CORE_LOGF_X(26, eLOG_Critical,
@@ -776,6 +777,7 @@ static EIO_Status s_GnuTlsInit(FSSLPull pull, FSSLPush push)
                      GNUTLS_VERSION, version));
         assert(0);
     }
+#endif
 
     if (!pull  ||  !push) {
         status = eIO_InvalidArg;
diff --git a/c++/src/connect/ncbi_mbedtls.c b/c++/src/connect/ncbi_mbedtls.c
index 19db747a..006a20fd 100644
--- a/c++/src/connect/ncbi_mbedtls.c
+++ b/c++/src/connect/ncbi_mbedtls.c
@@ -770,12 +770,14 @@ static EIO_Status s_MbedTlsInit(FSSLPull pull, FSSLPush push)
     CORE_TRACE("MbedTlsInit(): Enter");
 
     mbedtls_version_get_string(version);
+#if 0
     if (strcasecmp(MBEDTLS_VERSION_STRING, version) != 0) {
         CORE_LOGF_X(5, eLOG_Critical,
                     ("%s version mismatch: %s headers vs. %s runtime",
                      kMbedTls, MBEDTLS_VERSION_STRING, version));
         assert(0);
     }
+#endif
 
     if (!pull  ||  !push) {
         status = eIO_InvalidArg;