[Privoxy-devel] Privoxy 4.2.0 fails to build against the new openssl 4.0 and above

[Fabian Keil]

Andre de Lima Schwarz via Privoxy-devel <privoxy-devel at lists.privoxy.org> wrote on 2026-11-04 at 00:50:22:

> First of all I would like to thank you for developing this proxy solution.
> I have been using it for a while to harden my system, following an online
> tutorial, by filtering outgoing HTTP(S) requests. So far it has been
> working great and I feel my system is more robust with the software you
> develop.
> 
> However, I'm still unable to compile the latest version (4.20) against
> newer versions of OpenSSL, namely OpenSSL 4.0 and above. For reference, I'm
> sending the log of a failed compilation, attached.

Thanks for the report and the offer to help.

It looks like the log didn't make it, though.

> I think I solved it with a simple patch generated by lumo.proton.me. I must
> acknowledge, though, that I haven't tested it in depth.
>
> I don't know what your respective stances on LLM-based contributions is,
> but I could share it with you, if you don't mind.

I committed a patch to get Privoxy working with OpenSSL 4.x a couple
of months ago [0]. One limitation is that "showing the serial numbers
for rejected certificates in the CGI error messages when the validation
failed hasn't been implemented yet".

Does your patch have the same limitation?

If not, I'd be interested to review it.

We currently have no official policy regarding LLM-based contributions.

Fabian

[0]: <https://www.privoxy.org/gitweb/?p=privoxy.git;a=commitdiff;h=154755f5fa383bbc2c339>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 870 bytes
Desc: OpenPGP digital signature
URL: <https://lists.privoxy.org/pipermail/privoxy-devel/attachments/20261105/64ce70f0/attachment.bin>