From 60e4274ff758af0d68ba585e7286a5cddb7c4778 Mon Sep 17 00:00:00 2001 From: Omair Majid Date: Thu, 10 Jan 2019 18:37:24 -0500 Subject: [PATCH 5/7] Prefer OpenSSL 1.0.x for portable builds Future releases of .NET Core prefer OpenSSL 1.1.x. For the sake of compatiblity, 2.x releases should prefer 1.0.x. --- .../opensslshim.cpp | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) diff --git a/src/Native/Unix/System.Security.Cryptography.Native/opensslshim.cpp b/src/Native/Unix/System.Security.Cryptography.Native/opensslshim.cpp index 585f7ac23f..c98869a94e 100644 --- a/src/Native/Unix/System.Security.Cryptography.Native/opensslshim.cpp +++ b/src/Native/Unix/System.Security.Cryptography.Native/opensslshim.cpp @@ -47,12 +47,6 @@ bool OpenLibrary() libssl = dlopen(soName, RTLD_LAZY); } - if (libssl == nullptr) - { - // Prefer OpenSSL 1.1.x - libssl = dlopen("libssl.so.1.1", RTLD_LAZY); - } - if (libssl == nullptr) { // Debian 9 has dropped support for SSLv3 and so they have bumped their soname. Let's try it @@ -73,6 +67,11 @@ bool OpenLibrary() libssl = dlopen("libssl.so.10", RTLD_LAZY); } + if (libssl == nullptr) + { + libssl = dlopen("libssl.so.1.1", RTLD_LAZY); + } + return libssl != nullptr; } -- 2.20.1