From 403098f47887f18240fa0102668083201eedd47a Mon Sep 17 00:00:00 2001 From: Matthias Andree Date: Sun, 24 Apr 2016 12:58:51 +0200 Subject: Enable TLS 1.1/1.2 options on LibreSSL. LibreSSL does not provide a TLS_MAX_VERSION, so do not refer to it. --- socket.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/socket.c b/socket.c index d197c923..ed3643b1 100644 --- a/socket.c +++ b/socket.c @@ -946,7 +946,7 @@ int SSLOpen(int sock, char *mycert, char *mykey, const char *myproto, int certck _ctx[sock] = SSL_CTX_new(TLSv1_client_method()); } else if(!strcasecmp("tls1+",myproto)) { myproto = NULL; -#if defined(TLS1_1_VERSION) && TLS_MAX_VERSION >= TLS1_1_VERSION +#if defined(TLS1_1_VERSION) } else if(!strcasecmp("tls1.1",myproto)) { _ctx[sock] = SSL_CTX_new(TLSv1_1_client_method()); } else if(!strcasecmp("tls1.1+",myproto)) { @@ -957,7 +957,7 @@ int SSLOpen(int sock, char *mycert, char *mykey, const char *myproto, int certck report(stderr, GT_("Your OpenSSL version does not support TLS v1.1.\n")); return -1; #endif -#if defined(TLS1_2_VERSION) && TLS_MAX_VERSION >= TLS1_2_VERSION +#if defined(TLS1_2_VERSION) } else if(!strcasecmp("tls1.2",myproto)) { _ctx[sock] = SSL_CTX_new(TLSv1_2_client_method()); } else if(!strcasecmp("tls1.2+",myproto)) { -- cgit v1.2.3