diff options
| author |   jsing <jsing@openbsd.org> | 2020-01-22 08:24:25 +0000 |
|---|---|---|
| committer | jsing <jsing@openbsd.org> | 2020-01-22 08:24:25 +0000 |
| commit | 106f02591dc2b2ab9b9c384a5d41d15e01c11b73 (patch) | |
| tree | c10caf9f47195407044fec80fe581f24ba249b00 /lib/libssl | |
| parent | unifdef a few features we have. ok florian (diff) | |
| download | wireguard-openbsd-106f02591dc2b2ab9b9c384a5d41d15e01c11b73.tar.xz wireguard-openbsd-106f02591dc2b2ab9b9c384a5d41d15e01c11b73.zip | |
Enable the TLSv1.3 client in libssl.
This also makes it available to clients that use libtls, including ftp(1)
and nc(1).
Note that this does not expose additional defines via public headers, which
means that any code conditioning on defines like TLS1_3_VERSION or
SSL_OP_NO_TLSv1_3 will not enable or use TLSv1.3. This approach is
necessary since too many pieces of software assume that if TLS1_3_VERSION
is available, other OpenSSL 1.1 API will also be available, which is not
necessarily the case.
ok beck@ tb@
Diffstat (limited to 'lib/libssl')
| -rw-r--r-- | lib/libssl/ssl_locl.h | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/lib/libssl/ssl_locl.h b/lib/libssl/ssl_locl.h index 6016b4f9849..897f92f8482 100644 --- a/lib/libssl/ssl_locl.h +++ b/lib/libssl/ssl_locl.h @@ -1,4 +1,4 @@ -/* $OpenBSD: ssl_locl.h,v 1.249 2020/01/22 07:49:33 beck Exp $ */ +/* $OpenBSD: ssl_locl.h,v 1.250 2020/01/22 08:24:25 jsing Exp $ */ /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) * All rights reserved. * @@ -186,7 +186,8 @@ __BEGIN_HIDDEN_DECLS #define s2n(s,c) ((c[0]=(unsigned char)(((s)>> 8)&0xff), \ c[1]=(unsigned char)(((s) )&0xff)),c+=2) -/* #define LIBRESSL_HAS_TLS1_3_CLIENT */ +#define LIBRESSL_HAS_TLS1_3_CLIENT + #if defined(LIBRESSL_HAS_TLS1_3_CLIENT) || defined(LIBRESSL_HAS_TLS1_3_SERVER) #define LIBRESSL_HAS_TLS1_3 #endif |