Re: [PATCH] BUG/MINOR: ssl: fix curve setup with LibreSSL

2019-11-24 Thread Lukas Tribus
Hello, On Sun, Nov 24, 2019 at 6:20 PM Lukas Tribus wrote: > > Since commit 9a1ab08 ("CLEANUP: ssl-sock: use HA_OPENSSL_VERSION_NUMBER > instead of OPENSSL_VERSION_NUMBER") we restrict LibreSSL to the OpenSSL > 1.0.1 API, to avoid breaking LibreSSL every minute. We set >

Re: [PATCH] BUG/MINOR: ssl: fix curve setup with LibreSSL

2019-11-24 Thread Willy Tarreau
On Sun, Nov 24, 2019 at 06:20:40PM +0100, Lukas Tribus wrote: > Since commit 9a1ab08 ("CLEANUP: ssl-sock: use HA_OPENSSL_VERSION_NUMBER > instead of OPENSSL_VERSION_NUMBER") we restrict LibreSSL to the OpenSSL > 1.0.1 API, to avoid breaking LibreSSL every minute. We set > HA_OPENSSL_VERSION_NUMBER

[PATCH] BUG/MINOR: ssl: fix curve setup with LibreSSL

2019-11-24 Thread Lukas Tribus
Since commit 9a1ab08 ("CLEANUP: ssl-sock: use HA_OPENSSL_VERSION_NUMBER instead of OPENSSL_VERSION_NUMBER") we restrict LibreSSL to the OpenSSL 1.0.1 API, to avoid breaking LibreSSL every minute. We set HA_OPENSSL_VERSION_NUMBER to 0x1000107fL if LibreSSL is detected and only allow curves to be