]> granicus.if.org Git - curl/commitdiff
openssl: LibreSSL and BoringSSL do not use TLS_client_method
authorJay Satiro <raysatiro@yahoo.com>
Tue, 9 Jun 2015 03:42:11 +0000 (23:42 -0400)
committerJay Satiro <raysatiro@yahoo.com>
Tue, 9 Jun 2015 03:45:26 +0000 (23:45 -0400)
Although OpenSSL 1.1.0+ deprecated SSLv23_client_method in favor of
TLS_client_method LibreSSL and BoringSSL didn't and still use
SSLv23_client_method.

Bug: https://github.com/bagder/curl/commit/49a6642#commitcomment-11578009
Reported-by: asavah@users.noreply.github.com
lib/vtls/openssl.c

index 1df32558be955ef843dddaf0bcc3f4df99180cc0..d1ea5fbf1d4ff11721b68a98c923ba8454f2a20a 100644 (file)
@@ -1699,7 +1699,8 @@ static CURLcode ossl_connect_step1(struct connectdata *conn, int sockindex)
   case CURL_SSLVERSION_TLSv1_1:
   case CURL_SSLVERSION_TLSv1_2:
     /* it will be handled later with the context options */
-#if (OPENSSL_VERSION_NUMBER >= 0x10100000L)
+#if (OPENSSL_VERSION_NUMBER >= 0x10100000L) && \
+    !defined(LIBRESSL_VERSION_NUMBER) && !defined(OPENSSL_IS_BORINGSSL)
     req_method = TLS_client_method();
 #else
     req_method = SSLv23_client_method();