Prefer OpenSSL 1.0.x for portable builds

Future releases of .NET Core prefer OpenSSL 1.1.x. For the sake of compatiblity, 2.x releases should prefer 1.0.x.
dotnet · Jan 17, 2019 · 60e4274 · 60e4274
1 parent fc9d356
commit 60e4274
Showing 1 changed file with 5 additions and 6 deletions.
diff --git a/src/Native/Unix/System.Security.Cryptography.Native/opensslshim.cpp b/src/Native/Unix/System.Security.Cryptography.Native/opensslshim.cpp
@@ -47,12 +47,6 @@ bool OpenLibrary()
         libssl = dlopen(soName, RTLD_LAZY);
     }
 
-    if (libssl == nullptr)
-    {
-        // Prefer OpenSSL 1.1.x
-        libssl = dlopen("libssl.so.1.1", RTLD_LAZY);
-    }
-
     if (libssl == nullptr)
     {
         // Debian 9 has dropped support for SSLv3 and so they have bumped their soname. Let's try it
@@ -73,6 +67,11 @@ bool OpenLibrary()
         libssl = dlopen("libssl.so.10", RTLD_LAZY);
     }
 
+    if (libssl == nullptr)
+    {
+        libssl = dlopen("libssl.so.1.1", RTLD_LAZY);
+    }
+
     return libssl != nullptr;
 }