apache / apache/trafficserver

BIO_fastopen uses deprecated functions

Open
#12,207 2 comments 0 reactions 0 assignees View on GitHub
Cleanup Stale TLS
Dominant language
C++
Stars
2k
Forks
874
Avg merge
6d 15h
Merged PRs (30d)
46

Description

These functions/macro were deprecated since OpenSSL 3.5. The use is not safe, according to the manual.
BIO_meth_get_ctrl
BIO_meth_get_create
BIO_meth_get_destroy

https://docs.openssl.org/3.5/man3/BIO_meth_new/#bugs

Contributor guide

Open the contributing guide

Research direction

Locate the BIO_fastopen implementation and inspect its use of BIO_meth_get_ctrl, BIO_meth_get_create, and BIO_meth_get_destroy. Read the linked OpenSSL 3.5 BIO_meth_new documentation first to identify the supported replacement approach. Done means BIO_fastopen no longer uses these deprecated, unsafe functions and the relevant build or tests pass.

Written by the indexing model from the issue text.

Assessment

Tech stack
cpp
Domain
security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
48/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.