In <openssl/opensslv.h>, libressl-2.5.4 specifies
#define OPENSSL_VERSION_NUMBER  0x20000000L
but doesn't provide an API compatible with OpenSSL.  In particular,
it's missing (at least) SSL_CTX_set_max_proto_version() and
SSL_CTX_set_min_proto_version(), which were added in OpenSSL 1.1.0.
This breaks (at least) apache-2.4 which includes the code:
#if OPENSSL_VERSION_NUMBER >= 0x10100000L
    SSL_CTX_set_max_proto_version(ssl_ctx, max_prot);
    SSL_CTX_set_min_proto_version(ssl_ctx, min_prot);
#endif

Does anyone have a suggestion, other than switching from LibreSSL back to
OpenSSL?

-- 
Peter Jeremy

Attachment: signature.asc
Description: PGP signature

Reply via email to