BUG/MINOR: ssl: fix curve setup with LibreSSL
authorLukas Tribus <lukas@ltri.eu>
Sun, 24 Nov 2019 17:20:40 +0000 (18:20 +0100)
committerWilly Tarreau <w@1wt.eu>
Sun, 24 Nov 2019 17:24:20 +0000 (18:24 +0100)
commitd14b49c128af76870d64214694adbb38057932e0
tree2dd4e974cd4896c448534fe2389a27f0d1258c52
parent5f1fa7db86c53827c97f8a8c3f5fa75bfcb5be9a
BUG/MINOR: ssl: fix curve setup with LibreSSL

Since commit 9a1ab08 ("CLEANUP: ssl-sock: use HA_OPENSSL_VERSION_NUMBER
instead of OPENSSL_VERSION_NUMBER") we restrict LibreSSL to the OpenSSL
1.0.1 API, to avoid breaking LibreSSL every minute. We set
HA_OPENSSL_VERSION_NUMBER to 0x1000107fL if LibreSSL is detected and
only allow curves to be configured if HA_OPENSSL_VERSION_NUMBER is at
least 0x1000200fL.

However all relevant LibreSSL releases actually support settings curves,
which is now broken. Fix this by always allowing curve configuration when
using LibreSSL.

Reported on GitHub in issue #366.

Fixes: 9a1ab08 ("CLEANUP: ssl-sock: use HA_OPENSSL_VERSION_NUMBER instead
of OPENSSL_VERSION_NUMBER").
src/ssl_sock.c