search

Refinitiv / Real-Time-SDK

Other
180 stars 128 forks source link

Library doesn't support OpenSSL 3.1 #238

Closed andysCaplin closed 10 months ago

andysCaplin commented 1 year ago

If I specify OpenSSL 3.1 as the OpenSSL library in the initOpts.jitOpts.libcryptoName/initOpts.jitOpts.libsslName the library fails to load. This is because of this line

ripcsslutils.c:495             sslFuncs.ssl_get_peer_cert = (OPENSSL_X509* (*)(const OPENSSL_SSL*))RSSL_LI_DLSYM(sslHandle, "SSL_get_peer_certificate");

In OpenSSL 3.1 SSL_get_peer_certificate is a #define for SSL_get1_peer_certificate().

There may be other issues as well, that was the 1st one I hit.

It would also be very useful if a library didn't load that the log said which one didn't load and why instead of just saying the SSL libraries didn't load.

MitchellKato commented 1 year ago

We are aware of this and will have OpenSSL 3.X support in an upcoming release.

andysCaplin commented 1 year ago

Do you know when this is liekly to be ? We want to update our product before EOL of 1.1

Please see our blog post about the forthcoming End Of Life of OpenSSL 1.1.1 on 11th September 2023:

https://www.openssl.org/blog/blog/2023/03/28/1.1.1-EOL/

andysCaplin commented 11 months ago

Is there a date for the release that supports OpenSSL 3.1 ?

vlevendel commented 11 months ago

This is imminent (forthcoming in our Q3 release).

vlevendel commented 10 months ago

2.1.2.L1 (Q3 release) has support. Closing.