From d29a3907338bd012ce5707e0e052747da87b3ba4 Mon Sep 17 00:00:00 2001 From: Nick Mathewson Date: Mon, 9 Jan 2012 17:40:11 -0500 Subject: Test for broken counter-mode at runtime To solve bug 4779, we want to avoid OpenSSL 1.0.0's counter mode. But Fedora (and maybe others) lie about the actual OpenSSL version, so we can't trust the header to tell us if it's safe. Instead, let's do a run-time test to see whether it's safe, and if not, use our built-in version. fermenthor contributed a pretty essential fixup to this patch. Thanks! --- changes/aes_ctr_test | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 changes/aes_ctr_test (limited to 'changes/aes_ctr_test') diff --git a/changes/aes_ctr_test b/changes/aes_ctr_test new file mode 100644 index 000000000..8b5af4572 --- /dev/null +++ b/changes/aes_ctr_test @@ -0,0 +1,5 @@ + o Minor bugfixes + - Test for the OpenSSL 1.0.0 counter mode bug at runtime, not compile + time. This is necessary because OpenSSL has been hacked to mis-report + its version on a few distributions. + Bugfix on Tor 0.2.3.11-alpha. -- cgit v1.2.3