summaryrefslogtreecommitdiffstats
path: root/lib/libssl/s3_lib.c
diff options
context:
space:
mode:
authorjca <jca@openbsd.org>2018-03-15 12:27:00 +0000
committerjca <jca@openbsd.org>2018-03-15 12:27:00 +0000
commit870628e8df2a05b038a45151ff5ba140da1f81b4 (patch)
tree506b937662f5c1c53fcaa8f890557d20d30152bf /lib/libssl/s3_lib.c
parentadd syspatch public keys for 6.3 and 6.4 (diff)
downloadwireguard-openbsd-870628e8df2a05b038a45151ff5ba140da1f81b4.tar.xz
wireguard-openbsd-870628e8df2a05b038a45151ff5ba140da1f81b4.zip
Provide SSL_CTX_get_min_proto_version and SSL_CTX_get_max_proto_version
We already provided the setters, so also provide the getters like OpenSSL does. Addition prompted by the use of those functions in recent openvpn releases. manpage diff from schwarze@ (thanks!) with input from jsing@, ok tb@ jsing@
Diffstat (limited to 'lib/libssl/s3_lib.c')
-rw-r--r--lib/libssl/s3_lib.c14
1 files changed, 13 insertions, 1 deletions
diff --git a/lib/libssl/s3_lib.c b/lib/libssl/s3_lib.c
index 8f75cf94983..52e0c524102 100644
--- a/lib/libssl/s3_lib.c
+++ b/lib/libssl/s3_lib.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: s3_lib.c,v 1.164 2018/02/17 15:08:21 jsing Exp $ */
+/* $OpenBSD: s3_lib.c,v 1.165 2018/03/15 12:27:00 jca Exp $ */
/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
* All rights reserved.
*
@@ -1984,6 +1984,12 @@ ssl3_ctrl(SSL *s, int cmd, long larg, void *parg)
case SSL_CTRL_GET_SERVER_TMP_KEY:
return ssl_ctrl_get_server_tmp_key(s, parg);
+ case SSL_CTRL_GET_MIN_PROTO_VERSION:
+ return SSL_get_min_proto_version(s);
+
+ case SSL_CTRL_GET_MAX_PROTO_VERSION:
+ return SSL_get_max_proto_version(s);
+
case SSL_CTRL_SET_MIN_PROTO_VERSION:
if (larg < 0 || larg > UINT16_MAX)
return 0;
@@ -2243,6 +2249,12 @@ ssl3_ctx_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg)
case SSL_CTRL_SET_GROUPS_LIST:
return SSL_CTX_set1_groups_list(ctx, parg);
+ case SSL_CTRL_GET_MIN_PROTO_VERSION:
+ return SSL_CTX_get_min_proto_version(ctx);
+
+ case SSL_CTRL_GET_MAX_PROTO_VERSION:
+ return SSL_CTX_get_max_proto_version(ctx);
+
case SSL_CTRL_SET_MIN_PROTO_VERSION:
if (larg < 0 || larg > UINT16_MAX)
return 0;