debian/changelog

+ncbi-vdb (2.9.3+dfsg-2) unstable; urgency=medium
+
+  * Replace remainin occurrence of vdb_mbedtls_ssl_conf_authmode by
+    mbedtls_ssl_conf_authmode
+    Closes: #919306
+
+ -- Andreas Tille <tille@debian.org>  Mon, 14 Jan 2019 21:54:31 +0100
+
 ncbi-vdb (2.9.3+dfsg-1) unstable; urgency=medium
 
   * New upstream version

debian/patches/mbedtls_ssl_init.patch

@@ -68,7 +68,7 @@ Description: Name change of function probably a consequence of using Debian
                                          MBEDTLS_SSL_IS_CLIENT,
                                          MBEDTLS_SSL_TRANSPORT_STREAM,
                                          MBEDTLS_SSL_PRESET_DEFAULT );
-@@ -458,12 +458,12 @@ rc_t tlsg_setup ( KTLSGlobals * self )
+@@ -458,15 +458,15 @@ rc_t tlsg_setup ( KTLSGlobals * self )
      }
  
      /* turn off certificate validation when self -> allow_all_certs == true */
@@ -83,7 +83,11 @@ Description: Name change of function probably a consequence of using Debian
 +    mbedtls_ssl_conf_rng( &self -> config, mbedtls_ctr_drbg_random, &self -> ctr_drbg );
  
          /*  We need that to be sure that we are free to call 
-          *  vdb_mbedtls_ssl_conf_authmode () next time when 
+-         *  vdb_mbedtls_ssl_conf_authmode () next time when 
++         *  mbedtls_ssl_conf_authmode () next time when 
+          *  KNSManagerSetAllowAllCerts () will be called
+          *  
+          *  Because smart special design we do not need to add
 @@ -507,7 +507,7 @@ static int set_threshold ( const KConfig
      }
  
@@ -127,6 +131,15 @@ Description: Name change of function probably a consequence of using Debian
  
      memset ( self, 0, sizeof * self );
  }
+@@ -573,7 +573,7 @@ LIB_EXPORT rc_t CC KNSManagerSetAllowAll
+              *  handshake
+              */
+         if ( self -> tlsg . safe_to_modify_ssl_config ) {
+-            vdb_mbedtls_ssl_conf_authmode(
++            mbedtls_ssl_conf_authmode(
+                             &self -> tlsg . config,
+                                 ( self -> tlsg . allow_all_certs
+                                         ? MBEDTLS_SSL_VERIFY_OPTIONAL
 @@ -637,8 +637,8 @@ static
  void KTLSStreamDestroy ( KTLSStream *self )
  {