From aschwarz at usp.br  Wed Nov  4 01:50:22 2026
From: aschwarz at usp.br (Andre de Lima Schwarz)
Date: Wed, 4 Nov 2026 00:50:22 +0000
Subject: [Privoxy-devel] Privoxy 4.2.0 fails to build against the new
 openssl 4.0 and above
Message-ID: <CAJZeB3EPp9hm+k7vOgqzumRrA6JKXHa_iOivy-otsRqstL8VJA@mail.gmail.com>

Hello,

First of all I would like to thank you for developing this proxy solution.
I have been using it for a while to harden my system, following an online
tutorial, by filtering outgoing HTTP(S) requests. So far it has been
working great and I feel my system is more robust with the software you
develop.

However, I'm still unable to compile the latest version (4.20) against
newer versions of OpenSSL, namely OpenSSL 4.0 and above. For reference, I'm
sending the log of a failed compilation, attached.

I think I solved it with a simple patch generated by lumo.proton.me. I must
acknowledge, though, that I haven't tested it in depth.

I don't know what your respective stances on LLM-based contributions is,
but I could share it with you, if you don't mind.

Best regards,
Andr?

From fk at fabiankeil.de  Thu Nov  5 14:45:55 2026
From: fk at fabiankeil.de (Fabian Keil)
Date: Thu, 5 Nov 2026 14:45:55 +0100
Subject: [Privoxy-devel] Privoxy 4.2.0 fails to build against the new
 openssl 4.0 and above
In-Reply-To: <CAJZeB3EPp9hm+k7vOgqzumRrA6JKXHa_iOivy-otsRqstL8VJA@mail.gmail.com>
References: <CAJZeB3EPp9hm+k7vOgqzumRrA6JKXHa_iOivy-otsRqstL8VJA@mail.gmail.com>
Message-ID: <20261105144555.6ca21a44.fk@fabiankeil.de>

Andre de Lima Schwarz via Privoxy-devel <privoxy-devel at lists.privoxy.org> wrote on 2026-11-04 at 00:50:22:

> First of all I would like to thank you for developing this proxy solution.
> I have been using it for a while to harden my system, following an online
> tutorial, by filtering outgoing HTTP(S) requests. So far it has been
> working great and I feel my system is more robust with the software you
> develop.
> 
> However, I'm still unable to compile the latest version (4.20) against
> newer versions of OpenSSL, namely OpenSSL 4.0 and above. For reference, I'm
> sending the log of a failed compilation, attached.

Thanks for the report and the offer to help.

It looks like the log didn't make it, though.

> I think I solved it with a simple patch generated by lumo.proton.me. I must
> acknowledge, though, that I haven't tested it in depth.
>
> I don't know what your respective stances on LLM-based contributions is,
> but I could share it with you, if you don't mind.

I committed a patch to get Privoxy working with OpenSSL 4.x a couple
of months ago [0]. One limitation is that "showing the serial numbers
for rejected certificates in the CGI error messages when the validation
failed hasn't been implemented yet".

Does your patch have the same limitation?

If not, I'd be interested to review it.

We currently have no official policy regarding LLM-based contributions.

Fabian

[0]: <https://www.privoxy.org/gitweb/?p=privoxy.git;a=commitdiff;h=154755f5fa383bbc2c339>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 870 bytes
Desc: OpenPGP digital signature
URL: <https://lists.privoxy.org/pipermail/privoxy-devel/attachments/20261105/64ce70f0/attachment.bin>