Skip to content

Conversation

@vszakats
Copy link
Member

@vszakats vszakats commented Oct 23, 2025

Make autotools and cmake detect DES support in OpenSSL and mbedTLS.
Forward feature macros to C and omit NTLM from the feature preview list.
Use the feature macros in source. This ensure that -V output matches
the preview.

OpenSSL doesn't support DES when built with no-des or no-deprecated.
mbedTLS 4.x no longer supports it, and it's possible to disable it in
<4 with scripts/config.py unset MBEDTLS_DES_C.

Before this patch this worked for
mbedTLS 4 only, and with a regression for pending PR #16973.

Also:


  • fix for OpenSSL
  • fix for mbedTLS
  • verify for wolfSSL, fix if necessary. [it tested OK]

@github-actions github-actions bot added the CI Continuous Integration label Oct 23, 2025
@vszakats vszakats added build authentication and removed CI Continuous Integration labels Oct 23, 2025
@vszakats vszakats marked this pull request as draft October 23, 2025 20:18
@github-actions github-actions bot added the CI Continuous Integration label Oct 23, 2025
@vszakats vszakats changed the title GHA/http3-linux: unhide NTLM feature detection bug NTLM: disable if DES support is missing from OpenSSL or mbedTLS Oct 23, 2025
@vszakats vszakats changed the title NTLM: disable if DES support is missing from OpenSSL or mbedTLS NTLM: disable if DES support missing from OpenSSL or mbedTLS Oct 23, 2025
@vszakats vszakats marked this pull request as ready for review October 23, 2025 23:50
@vszakats vszakats added the TLS label Oct 24, 2025
@vszakats vszakats closed this in 4a6fbd5 Oct 24, 2025
@vszakats vszakats deleted the ntlmfallouts branch October 24, 2025 10:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Development

Successfully merging this pull request may close these issues.

2 participants