Does not compile without deprecated OpenSSL APIs
Since it seems I can't make merge requests, here's a patch:
--- a/lib/isc/tls.c
+++ b/lib/isc/tls.c
@@ -9,8 +9,10 @@
* information regarding copyright ownership.
*/
+#include <openssl/bn.h>
#include <openssl/err.h>
#include <openssl/opensslv.h>
+#include <openssl/rsa.h>
#include <isc/atomic.h>
#include <isc/log.h>
@@ -220,11 +222,11 @@ isc_tlsctx_createserver(const char *keyfile, const char *certfile,
rsa = NULL;
ASN1_INTEGER_set(X509_get_serialNumber(cert), 1);
- X509_gmtime_adj(X509_get_notBefore(cert), 0);
+ X509_gmtime_adj(X509_getm_notBefore(cert), 0);
/*
* We set the vailidy for 10 years.
*/
- X509_gmtime_adj(X509_get_notAfter(cert), 3650 * 24 * 3600);
+ X509_gmtime_adj(X509_getm_notAfter(cert), 3650 * 24 * 3600);
X509_set_pubkey(cert, pkey);