projects / haproxy-2.3.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: eec7f8a) | patch
BUILD: ssl: improve SSL_CTX_set_ecdh_auto compatibility
authorLukas Tribus <lukas@ltri.eu>
Fri, 20 Dec 2019 17:47:18 +0000 (18:47 +0100)
committerWilly Tarreau <w@1wt.eu>
Sat, 21 Dec 2019 05:46:55 +0000 (06:46 +0100)
commita26d1e13245a760bd422e4e4b6a85cc17f9f0a60
tree7d5751dd62941740275c8f87c778f3d1bc8c77f4tree | snapshot
parenteec7f8ac01cb744bc30f50327dd989b4763e0205commit | diff
BUILD: ssl: improve SSL_CTX_set_ecdh_auto compatibility

SSL_CTX_set_ecdh_auto() is not defined when OpenSSL 1.1.1 is compiled
with the no-deprecated option. Remove existing, incomplete guards and
add a compatibility macro in openssl-compat.h, just as OpenSSL does:

https://github.com/openssl/openssl/blob/bf4006a6f9be691ba6eef0e8629e63369a033ccf/include/openssl/ssl.h#L1486

This should be backported as far as 2.0 and probably even 1.9.
include/common/openssl-compat.h diff | blob | history
src/ssl_sock.c diff | blob | history
haproxy-2.3 public tree. Stable production code.