> On 6 Apr 2024, at 08:02, Peter Eisentraut <peter@eisentraut.org> wrote:
>
> On 05.04.24 23:48, Daniel Gustafsson wrote:
>> The reason to expand the check is to ensure that we have the version we want
>> for both OpenSSL and LibreSSL, and deprecating OpenSSL versions isn't all that
>> commonly done so having to change the version in the check didn't seem that
>> invasive to me.
>
> Why do we need to check for the versions at all? We should just check for the functions we need. At least that's
alwaysbeen the normal approach in configure.
We could, but finding a stable set of functions which identifies the version of
OpenSSL *and* LibreSSL that we want, and their successors, while not matching
any older versions seemed more opaque than testing two numeric values. The
suggested check is modelled on the LDAP check which tests for an explicit
version in a header file (albeit not for erroring out).
--
Daniel Gustafsson