wget: build against Openssl w/o deprecated API
authorPhilip Prindeville <redacted>
Fri, 6 Feb 2026 21:08:48 +0000 (14:08 -0700)
committerPhilip Prindeville <redacted>
Sun, 8 Feb 2026 18:38:17 +0000 (11:38 -0700)
If you're building against 3.0.0 or later and you've defined
OPENSSL_NO_DEPRECATED, this breaks.

Signed-off-by: Philip Prindeville <redacted>
net/wget/patches/900-new-cert-api.patch [new file with mode: 0644]

diff --git a/net/wget/patches/900-new-cert-api.patch b/net/wget/patches/900-new-cert-api.patch
new file mode 100644 (file)
index 0000000..4758fbe
--- /dev/null
@@ -0,0 +1,14 @@
+--- a/src/openssl.c
++++ b/src/openssl.c
+@@ -1044,7 +1044,11 @@ ssl_check_certificate (int fd, const cha
+   if (opt.check_cert == CHECK_CERT_QUIET && pinsuccess)
+     return success;
++#ifdef OPENSSL_NO_DEPRECATED_3_0
++  cert = SSL_get1_peer_certificate (conn);
++#else
+   cert = SSL_get_peer_certificate (conn);
++#endif
+   if (!cert)
+     {
+       logprintf (LOG_NOTQUIET, _("%s: No certificate presented by %s.\n"),
git clone https://git.99rst.org/PROJECT