瀏覽代碼

Log a notice if we're running with OpenSSL before 1.0.0.

These versions have some dubious, slow crypto implementations; 1.0.0
is a great improvement, and at this point is pretty mature.
Nick Mathewson 11 年之前
父節點
當前提交
be68c1fb43
共有 1 個文件被更改,包括 5 次插入0 次删除
  1. 5 0
      src/common/crypto.c

+ 5 - 0
src/common/crypto.c

@@ -243,6 +243,11 @@ crypto_global_init(int useAccel, const char *accelName, const char *accelDir)
                SSLeay(), SSLeay_version(SSLEAY_VERSION));
     }
 
+    if (SSLeay() < OPENSSL_V_SERIES(1,0,0)) {
+      log_notice(LD_CRYPTO, "Your OpenSSL version seems to be %s. We "
+                 "recommend 1.0.0 or later.", crypto_openssl_get_version_str());
+    }
+
     if (useAccel > 0) {
 #ifdef DISABLE_ENGINES
       (void)accelName;