jeltz/hostap
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

LibreSSL: Fix build with LibreSSL versions older than 2.9.1

Browse source 
SSL_add0_chain_cert() was not available in LibreSSL before version
2.9.1.

Fixes: 4b834df5e0 ("OpenSSL: Support PEM encoded chain from client_cert blob")
Signed-off-by: Jouni Malinen <j@w1.fi>
This commit is contained in:
Jouni Malinen 2020-08-22 11:32:01 +03:00
parent 5dedbd582a
commit 2caff11d7a
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
src/crypto/tls_openssl.c
View file

@ -3252,6 +3252,10 @@ static int tls_connection_client_cert(struct tls_connection *conn,
"OK"); "OK");
return 0; return 0;
} else if (client_cert_blob) { } else if (client_cert_blob) {
#if defined(LIBRESSL_VERSION_NUMBER) && LIBRESSL_VERSION_NUMBER < 0x20901000L
tls_show_errors(MSG_DEBUG, __func__,
"SSL_use_certificate_ASN1 failed");
#else
BIO *bio; BIO *bio;
X509 *x509; X509 *x509;
@ -3277,6 +3281,7 @@ static int tls_connection_client_cert(struct tls_connection *conn,
} }
BIO_free(bio); BIO_free(bio);
return 0; return 0;
#endif
} }
if (client_cert == NULL) if (client_cert == NULL)