Mailing-List: contact cygwin-apps-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-apps-owner AT cygwin DOT com
List-Subscribe: <mailto:cygwin-apps-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin-apps/>
List-Post: <mailto:cygwin-apps AT cygwin DOT com>
List-Help: <mailto:cygwin-apps-help AT cygwin DOT com>, <http://sources.redhat.com/lists.html#faqs>
Delivered-To: mailing list cygwin-apps AT cygwin DOT com
content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Subject: RE: Maintainers of CURL, MUTT, PYTHON and WGET, heads up!
X-MimeOLE: Produced By Microsoft Exchange V6.0.4712.0
Date: Tue, 15 Jan 2002 13:30:33 -0500
Message-ID: <6EB31774D39507408D04392F40A10B2BC1FED7@FDYEXC202.mgroupnet.com>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: Maintainers of CURL, MUTT, PYTHON and WGET, heads up!
Thread-Index: AcGd8rfJDv0nwhBsSIu1FxM8NU7OuA==
From: "Roth, Kevin P." <KPRoth AT MarathonOil DOT com>
To: <cygwin-apps AT cygwin DOT com>
X-OriginalArrivalTime: 15 Jan 2002 18:30:33.0798 (UTC) FILETIME=[B803AE60:01C19DF2]
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by delorie.com id g0FIUi400942

Yes, I checked an actual SSL connection. It actually worked ;-)

There's no call anywhere in the source to SSLeay or SSLeay_version.
There are some references to the value of both SSLEAY_VERSION_NUMBER and
OPENSSL_VERSION_NUMBER. It's not assigned (set) anywhere in curl's code,
just used. I do see ">=" types of comparisons (as opposed to checking
for specific version #'s), so I assume he's golden in that regard.

I will try to get the upstream folk to change the behavior so it uses
SSLeay_version() sometime in the future...

Thanks for the info.
--Kevin



-----Original Message-----
From: Corinna Vinschen [mailto:vinschen AT redhat DOT com]
Sent: Tuesday, January 15, 2002 12:46 PM

On Tue, Jan 15, 2002 at 12:39:39PM -0500, Roth, Kevin P. wrote:
> ... However, curl
> outputs the openssl version as part of its --version output, and it
> still says openssl 0.9.6b! ...

Look into the source.  If there's a call to SSLeay() or
SSLeay_version() it takes the version it's running under.

grep for OPENSSL_VERSION_NUMBER.  If it's just used as
is in a printf() somewhere, curl reports the version
it's linked against.

The second is bad style.  It should print either the current
version using one of the above calls or it should report both
versions, the linked and the current one.

Anyway, it's good to hear that it still works.  You checked
an SSL connection?