[3.14] gh-139929: fix incorrect OpenSSL version-based guard in _ssl.c (GH-139945) (#139964)

miss-islington · picnixz · web-flow · commit 187588e67522 · 2025-10-11T17:59:55.000Z
gh-139929: fix incorrect OpenSSL version-based guard in `_ssl.c` (GH-139945) fix OpenSSL version-based guards (cherry picked from commit cdd3eee) Co-authored-by: Bénédikt Tran <10796600+picnixz@users.noreply.github.com>
diff --git a/Modules/_ssl.c b/Modules/_ssl.c
@@ -910,7 +910,7 @@ newPySSLSocket(PySSLContext *sslctx, PySocketSockObject *sock,
     }
 
     /* bpo43522 and OpenSSL < 1.1.1l: copy hostflags manually */
-#if OPENSSL_VERSION < 0x101010cf
+#if OPENSSL_VERSION_NUMBER < 0x101010cf
     X509_VERIFY_PARAM *ssl_verification_params = SSL_get0_param(self->ssl);
     X509_VERIFY_PARAM *ssl_ctx_verification_params = SSL_CTX_get0_param(ctx);
 

Original file line number	Diff line number	Diff line change
`@@ -910,7 +910,7 @@ newPySSLSocket(PySSLContext sslctx, PySocketSockObject sock,`
`910`	`910`	`}`
`911`	`911`
`912`	`912`	`/* bpo43522 and OpenSSL < 1.1.1l: copy hostflags manually */`
`913`		`-#if OPENSSL_VERSION < 0x101010cf`
	`913`	`+#if OPENSSL_VERSION_NUMBER < 0x101010cf`
`914`	`914`	`X509_VERIFY_PARAM *ssl_verification_params = SSL_get0_param(self->ssl);`
`915`	`915`	`X509_VERIFY_PARAM *ssl_ctx_verification_params = SSL_CTX_get0_param(ctx);`
`916`	`916`