tree 7bdd897b3ae35142e10b7faa17ec383fb9d583ec
parent 8c3c39359d2b91d57cb72fd0b00576e7c78d0f83
author William Lallemand <wlallemand@haproxy.com> 1710241387 +0100
committer Christopher Faulet <cfaulet@haproxy.com> 1720770046 +0200

MEDIUM: ssl: initialize the SSL stack explicitely

In issue #2448, users are complaining that FIPS is not working correctly
since the removal of SSL_library_init().

This was removed because SSL_library_init() is deprecated with OpenSSL
3.x and emits a warning. But the initialization was not needed anymore
because it is done at the first openssl API call.

However it some cases it is needed. SSL_library_init() is now a define
to OPENSSL_init_ssl(0, NULL). This patch adds OPENSSL_init_ssl(0, NULL)
to the init.

This could be backported in every stable branches, however let's wait
before backporting it.

(cherry picked from commit 7e9e4a8f501191044bf37341b6b5df68219e9e1c)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>
(cherry picked from commit a93432de6645e5fb365993c846229863cb048e9c)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>