From: Jay Satiro Date: Tue, 9 Jun 2015 03:42:11 +0000 (-0400) Subject: openssl: LibreSSL and BoringSSL do not use TLS_client_method X-Git-Tag: curl-7_43_0~32 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=cbf2920d02b6d8feff7b8a36b174fef162bbcf1d;p=curl openssl: LibreSSL and BoringSSL do not use TLS_client_method Although OpenSSL 1.1.0+ deprecated SSLv23_client_method in favor of TLS_client_method LibreSSL and BoringSSL didn't and still use SSLv23_client_method. Bug: https://github.com/bagder/curl/commit/49a6642#commitcomment-11578009 Reported-by: asavah@users.noreply.github.com --- diff --git a/lib/vtls/openssl.c b/lib/vtls/openssl.c index 1df32558b..d1ea5fbf1 100644 --- a/lib/vtls/openssl.c +++ b/lib/vtls/openssl.c @@ -1699,7 +1699,8 @@ static CURLcode ossl_connect_step1(struct connectdata *conn, int sockindex) case CURL_SSLVERSION_TLSv1_1: case CURL_SSLVERSION_TLSv1_2: /* it will be handled later with the context options */ -#if (OPENSSL_VERSION_NUMBER >= 0x10100000L) +#if (OPENSSL_VERSION_NUMBER >= 0x10100000L) && \ + !defined(LIBRESSL_VERSION_NUMBER) && !defined(OPENSSL_IS_BORINGSSL) req_method = TLS_client_method(); #else req_method = SSLv23_client_method();