Documentation: Add instructions to disable OpenSSL legacy renegotiation

In distributions with newer versions of OpenSSL, when you run
Meta/serenity.sh rebuild-toolchain you'll get curl: (35)
error:0A000152:SSL routines::unsafe legacy renegotiation
disabled. This is because OpenSSL was compiled with legacy
renegotiation disabled by default. I've added instructions
to Documentation/BuildInstructions.md to solve this issue.
This commit is contained in:
Dennis 2023-08-07 17:48:29 +01:00 committed by Andrew Kaster
parent 50c73d02f0
commit 2c17742811
Notes: sideshowbarker 2024-07-17 03:35:16 +09:00

View file

@ -20,6 +20,23 @@ Ensure your gcc version is >= 12 with `gcc --version`. Otherwise, install it. If
called `gcc` you have to specify the names of your C and C++ compiler when you run cmake, e.g.
`cmake ../.. -GNinja -DCMAKE_C_COMPILER=gcc-12 -DCMAKE_CXX_COMPILER=g++-12`.
### Legacy renegotiation is disabled
Ensure your `/etc/ssl/openssl.cnf` file has the following options:
```console
[openssl_init]
ssl_conf = ssl_sect
[ssl_sect]
system_default = system_default_sect
[system_default_sect]
MinProtocol = TLSv1.2
CipherString = DEFAULT@SECLEVEL=1
Options = UnsafeLegacyRenegotiation
```
## Running SerenityOS
### The VM is really slow