From: Aaron M. Ucko <ucko@debian.org>
Date: Thu, 2 Dec 2021 03:08:16 +0000 (-0500)
Subject: suppress gnu TLS and mbed TLS version checks
X-Git-Tag: archive/raspbian/2.16.0+ds-7+rpi1~10
X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=3af4469f021a8d9bb8a6dd54df6930dcc06feeeb;p=ncbi-blast%2B.git

suppress gnu TLS and mbed TLS version checks


   Prevent bailing when the exact compile-time and runtime GNU TLS versions
   differ; trust dpkg to disallow combinations that are actually incompatible.
   Likewise for mbed TLS.

Gbp-Pq: Name suppress_tls_version_checks
---

diff --git a/c++/src/connect/ncbi_gnutls.c b/c++/src/connect/ncbi_gnutls.c
index a4c1cfdb..e262eefb 100644
--- a/c++/src/connect/ncbi_gnutls.c
+++ b/c++/src/connect/ncbi_gnutls.c
@@ -748,6 +748,7 @@ static EIO_Status s_GnuTlsInit(FSSLPull pull, FSSLPush push)
 
     assert(!s_GnuTlsCredAnon);
 
+#if 0
     version = gnutls_check_version(0);
     if (strcasecmp(GNUTLS_VERSION, version) != 0) {
         CORE_LOGF_X(26, eLOG_Critical,
@@ -755,6 +756,7 @@ static EIO_Status s_GnuTlsInit(FSSLPull pull, FSSLPush push)
                      GNUTLS_VERSION, version));
         assert(0);
     }
+#endif
 
     CORE_TRACE("GnuTlsInit(): Enter");
 
diff --git a/c++/src/connect/ncbi_mbedtls.c b/c++/src/connect/ncbi_mbedtls.c
index c0aeaa1a..f828bb43 100644
--- a/c++/src/connect/ncbi_mbedtls.c
+++ b/c++/src/connect/ncbi_mbedtls.c
@@ -739,12 +739,14 @@ static EIO_Status s_MbedTlsInit(FSSLPull pull, FSSLPush push)
     psa_status_t psa_status;
 
     mbedtls_version_get_string(version);
+#if 0
     if (strcasecmp(MBEDTLS_VERSION_STRING, version) != 0) {
         CORE_LOGF_X(5, eLOG_Critical,
                     ("%s version mismatch: %s headers vs. %s runtime",
                      kMbedTls, MBEDTLS_VERSION_STRING, version));
         assert(0);
     }
+#endif
 
     CORE_TRACE("MbedTlsInit(): Enter");