summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJay Satiro <raysatiro@yahoo.com>2015-06-08 23:42:11 -0400
committerJay Satiro <raysatiro@yahoo.com>2015-06-08 23:45:26 -0400
commitcbf2920d02b6d8feff7b8a36b174fef162bbcf1d (patch)
treedb29baa88a34d5f44b2a067ae6ed659814d137b6
parent0fcfe4d7acd3abf5b969c9aa4c28ff7f362b0e39 (diff)
downloadgnurl-cbf2920d02b6d8feff7b8a36b174fef162bbcf1d.tar.gz
gnurl-cbf2920d02b6d8feff7b8a36b174fef162bbcf1d.tar.bz2
gnurl-cbf2920d02b6d8feff7b8a36b174fef162bbcf1d.zip
openssl: LibreSSL and BoringSSL do not use TLS_client_method
Although OpenSSL 1.1.0+ deprecated SSLv23_client_method in favor of TLS_client_method LibreSSL and BoringSSL didn't and still use SSLv23_client_method. Bug: https://github.com/bagder/curl/commit/49a6642#commitcomment-11578009 Reported-by: asavah@users.noreply.github.com
-rw-r--r--lib/vtls/openssl.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/lib/vtls/openssl.c b/lib/vtls/openssl.c
index 1df32558b..d1ea5fbf1 100644
--- a/lib/vtls/openssl.c
+++ b/lib/vtls/openssl.c
@@ -1699,7 +1699,8 @@ static CURLcode ossl_connect_step1(struct connectdata *conn, int sockindex)
case CURL_SSLVERSION_TLSv1_1:
case CURL_SSLVERSION_TLSv1_2:
/* it will be handled later with the context options */
-#if (OPENSSL_VERSION_NUMBER >= 0x10100000L)
+#if (OPENSSL_VERSION_NUMBER >= 0x10100000L) && \
+ !defined(LIBRESSL_VERSION_NUMBER) && !defined(OPENSSL_IS_BORINGSSL)
req_method = TLS_client_method();
#else
req_method = SSLv23_client_method();