suppress gnu TLS and mbed TLS version checks
authorAaron M. Ucko <ucko@debian.org>
Thu, 2 Dec 2021 03:08:16 +0000 (22:08 -0500)
committerAaron M. Ucko <ucko@debian.org>
Tue, 5 Sep 2023 02:40:42 +0000 (22:40 -0400)
   Prevent bailing when the exact compile-time and runtime GNU TLS versions
   differ; trust dpkg to disallow combinations that are actually incompatible.
   Likewise for mbed TLS.

Gbp-Pq: Name suppress_tls_version_checks

c++/src/connect/ncbi_gnutls.c
c++/src/connect/ncbi_mbedtls.c

index 897096182559bfe4a8a2d44b99b938e3b0c51fae..74d770c222e9831eaf5d132aae1c033df6cb5ab0 100644 (file)
@@ -692,6 +692,7 @@ static EIO_Status s_GnuTlsInit(FSSLPull pull, FSSLPush push)
 
     assert(!s_GnuTlsCredAnon);
 
+#if 0
     version = gnutls_check_version(0);
     if (strcasecmp(GNUTLS_VERSION, version) != 0) {
         CORE_LOGF(eLOG_Critical,
@@ -699,6 +700,7 @@ static EIO_Status s_GnuTlsInit(FSSLPull pull, FSSLPush push)
                    GNUTLS_VERSION, version));
         assert(0);
     }
+#endif
 
     if (!pull  ||  !push)
         return eIO_InvalidArg;
index d8da0bb4f89600ef80a431dbcdb66a51dee6fce9..67043995ebbb6624d430d44d96cfddb246244edb 100644 (file)
@@ -665,12 +665,14 @@ static EIO_Status s_MbedTlsInit(FSSLPull pull, FSSLPush push)
     char buf[32];
 
     mbedtls_version_get_string(version);
+#if 0
     if (strcasecmp(MBEDTLS_VERSION_STRING, version) != 0) {
         CORE_LOGF(eLOG_Critical,
                   ("%s version mismatch: %s headers vs. %s runtime",
                    kMbedTls, MBEDTLS_VERSION_STRING, version));
         assert(0);
     }
+#endif
 
     if (!pull  ||  !push)
         return eIO_InvalidArg;