|
 |
763875 |
From f22b032956bc492dcf47b2a909f91a6fb2c6e49b Mon Sep 17 00:00:00 2001
|
|
|
763875 |
From: William Lallemand <wlallemand@haproxy.org>
|
|
|
763875 |
Date: Wed, 2 Jun 2021 16:09:11 +0200
|
|
|
763875 |
Subject: [PATCH] BUILD: fix compilation for OpenSSL-3.0.0-alpha17
|
|
|
763875 |
|
|
|
763875 |
Some changes in the OpenSSL syntax API broke this syntax:
|
|
|
763875 |
#if SSL_OP_NO_TLSv1_3
|
|
|
763875 |
|
|
|
763875 |
OpenSSL made this change which broke our usage in commit f04bb0bce490de847ed0482b8ec9eabedd173852:
|
|
|
763875 |
|
|
|
763875 |
-# define SSL_OP_NO_TLSv1_3 (uint64_t)0x20000000
|
|
|
763875 |
+#define SSL_OP_BIT(n) ((uint64_t)1 << (uint64_t)n)
|
|
|
763875 |
+# define SSL_OP_NO_TLSv1_3 SSL_OP_BIT(29)
|
|
|
763875 |
|
|
|
763875 |
Which can't be evaluated by the preprocessor anymore.
|
|
|
763875 |
This patch replace the test by an openssl version test.
|
|
|
763875 |
|
|
|
763875 |
This fix part of #1276 issue.
|
|
|
763875 |
---
|
|
|
763875 |
src/ssl_sock.c | 4 ++--
|
|
|
763875 |
1 file changed, 2 insertions(+), 2 deletions(-)
|
|
|
763875 |
|
|
|
763875 |
diff --git a/src/ssl_sock.c b/src/ssl_sock.c
|
|
|
763875 |
index f596a831d..27a4c3531 100644
|
|
|
763875 |
--- a/src/ssl_sock.c
|
|
|
763875 |
+++ b/src/ssl_sock.c
|
|
|
763875 |
@@ -2217,13 +2217,13 @@ static void ssl_set_TLSv12_func(SSL *ssl, set_context_func c) {
|
|
|
763875 |
: SSL_set_min_proto_version(ssl, TLS1_2_VERSION);
|
|
|
763875 |
}
|
|
|
763875 |
static void ctx_set_TLSv13_func(SSL_CTX *ctx, set_context_func c) {
|
|
|
763875 |
-#if SSL_OP_NO_TLSv1_3
|
|
|
763875 |
+#if (HA_OPENSSL_VERSION_NUMBER >= 0x10101000L)
|
|
|
763875 |
c == SET_MAX ? SSL_CTX_set_max_proto_version(ctx, TLS1_3_VERSION)
|
|
|
763875 |
: SSL_CTX_set_min_proto_version(ctx, TLS1_3_VERSION);
|
|
|
763875 |
#endif
|
|
|
763875 |
}
|
|
|
763875 |
static void ssl_set_TLSv13_func(SSL *ssl, set_context_func c) {
|
|
|
763875 |
-#if SSL_OP_NO_TLSv1_3
|
|
|
763875 |
+#if (HA_OPENSSL_VERSION_NUMBER >= 0x10101000L)
|
|
|
763875 |
c == SET_MAX ? SSL_set_max_proto_version(ssl, TLS1_3_VERSION)
|
|
|
763875 |
: SSL_set_min_proto_version(ssl, TLS1_3_VERSION);
|
|
|
763875 |
#endif
|
|
|
763875 |
--
|
|
|
763875 |
2.31.1
|
|
|
763875 |
|