[GitHub] [trafficserver] maskit commented on pull request #7298: Adds OCSP support for BoringSSL

[GitBox <gi...@apache.org>]

maskit commented on pull request #7298:
URL: https://github.com/apache/trafficserver/pull/7298#issuecomment-767324171


   Some of functions that this PR adds are going to be deprecated on OpenSSL 3.0. ATS uses three of those, and will need to use some replacements.
   https://github.com/openssl/openssl/blob/master/doc/man3/OCSP_sendreq_new.pod
   
   > Deprecated since OpenSSL 3.0, can be hidden entirely by defining OPENSSL_API_COMPAT with a suitable version value, see openssl_user_macros(7):
   ```
   int OCSP_REQ_CTX_i2d(OCSP_REQ_CT *rctx, const ASN1_ITEM *it, ASN1_VALUE *req);
   int OCSP_REQ_CTX_add1_header(OCSP_REQ_CT *rctx,
                                const char *name, const char *value);
   void OCSP_REQ_CTX_free(OSSL_HTTP_REQ_CTX *rctx);
   void OCSP_set_max_response_length(OCSP_REQ_CT *rctx,
                                     unsigned long len);
   int OCSP_REQ_CTX_set1_req(OSSL_HTTP_REQ_CTX *rctx, const OCSP_REQUEST *req);
   ```


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org