suppress gnu TLS and mbed TLS version checks

   Prevent bailing when the exact compile-time and runtime GNU TLS versions
   differ; trust dpkg to disallow combinations that are actually incompatible.
   Likewise for mbed TLS.

Gbp-Pq: Name suppress_tls_version_checks

diff --git a/c++/src/connect/ncbi_gnutls.c b/c++/src/connect/ncbi_gnutls.c
index a4c1cfdb16d2a6dfeafb9701127bc1e25a768eca..e262eefb85e03d009b19eb72287e113608098eb3 100644 (file)
--- a/c++/src/connect/ncbi_gnutls.c
+++ b/c++/src/connect/ncbi_gnutls.c
@@ -748,6 +748,7 @@ static EIO_Status s_GnuTlsInit(FSSLPull pull, FSSLPush push)
 
     assert(!s_GnuTlsCredAnon);
 
+#if 0
     version = gnutls_check_version(0);
     if (strcasecmp(GNUTLS_VERSION, version) != 0) {
         CORE_LOGF_X(26, eLOG_Critical,
@@ -755,6 +756,7 @@ static EIO_Status s_GnuTlsInit(FSSLPull pull, FSSLPush push)
                      GNUTLS_VERSION, version));
         assert(0);
     }
+#endif
 
     CORE_TRACE("GnuTlsInit(): Enter");
 

diff --git a/c++/src/connect/ncbi_mbedtls.c b/c++/src/connect/ncbi_mbedtls.c
index c0aeaa1a2076b44ccba05672850b554bdb99935f..f828bb431aff1ae5f747d9960ca965ae3b1732f7 100644 (file)
--- a/c++/src/connect/ncbi_mbedtls.c
+++ b/c++/src/connect/ncbi_mbedtls.c
@@ -739,12 +739,14 @@ static EIO_Status s_MbedTlsInit(FSSLPull pull, FSSLPush push)
     psa_status_t psa_status;
 
     mbedtls_version_get_string(version);
+#if 0
     if (strcasecmp(MBEDTLS_VERSION_STRING, version) != 0) {
         CORE_LOGF_X(5, eLOG_Critical,
                     ("%s version mismatch: %s headers vs. %s runtime",
                      kMbedTls, MBEDTLS_VERSION_STRING, version));
         assert(0);
     }
+#endif
 
     CORE_TRACE("MbedTlsInit(): Enter");