Don't build dynamic engines unless configured "shared"
authorRichard Levitte <levitte@openssl.org>
Fri, 11 Mar 2016 11:58:15 +0000 (12:58 +0100)
committerRichard Levitte <levitte@openssl.org>
Fri, 11 Mar 2016 11:58:15 +0000 (12:58 +0100)
Experience has shown that dynamic engines with their own copy of
libcrypto is problematic, so we disable that possibility.

Reviewed-by: Matt Caswell <matt@openssl.org>
Configure

index 9b14579..eeae03e 100755 (executable)
--- a/Configure
+++ b/Configure
@@ -396,7 +396,8 @@ my @disable_cascades = (
     "dso"               => [ "dynamic-engine" ],
 
     # Without position independent code, there can be no shared libraries or DSOs
-    "pic"               => [ "shared", "dynamic-engine" ],
+    "pic"               => [ "shared" ],
+    "shared"            => [ "dynamic-engine" ],
     );
 
 # Avoid protocol support holes.  Also disable all versions below N, if version