ursachec / CPAProxy

A thin Objective-C wrapper around Tor.
Other
160 stars 49 forks source link

More robust openssl url handling #32

Closed rainwolf closed 8 years ago

rainwolf commented 8 years ago

This code checks for a 404 status code when trying to download the openssl archive, if so, then looks for it in the source/old folder

chrisballinger commented 8 years ago

Although this will reduce build errors for people (which is good), I think it's a bad default to silently downgrade to potentially vulnerable versions of OpenSSL. It would be nice if OpenSSL offered something like openssl-1.0.1-latest.tar.gz that was always up to date.

rainwolf commented 8 years ago

Good point. They do have a repository here in GitHub, would it be unwise to clone the OpenSSL_1_0_2-stable branch?