From 0a3d31b8a61f286220636e18d33964bb8c73f8aa Mon Sep 17 00:00:00 2001 From: Andy Green Date: Sun, 21 Feb 2016 07:08:28 +0800 Subject: [PATCH] ssl get rid of build_cert_chain It's not supported on major distro SSL (Fedora is 1.1) and libressl (on 2.x) doesn't have it either. https://github.com/warmcat/libwebsockets/issues/435 Signed-off-by: Andy Green --- lib/ssl.c | 7 ------- 1 file changed, 7 deletions(-) diff --git a/lib/ssl.c b/lib/ssl.c index 719f4bf..a0372d7 100644 --- a/lib/ssl.c +++ b/lib/ssl.c @@ -342,13 +342,6 @@ lws_context_init_server_ssl(struct lws_context_creation_info *info, if (lws_context_ssl_init_ecdh(context)) return 1; -#if OPENSSL_VERSION_NUMBER >= 0x10200000L - n = SSL_CTX_build_cert_chain((SSL_CTX *)user, - SSL_BUILD_CHAIN_FLAG_CHECK | - SSL_BUILD_CHAIN_FLAG_IGNORE_ERROR); - lwsl_notice("%s: build cert chain %d", __func__, n); -#endif - /* * SSL is happy and has a cert it's content with * If we're supporting HTTP2, initialize that -- 2.7.4