d0kuhn/mosquitto
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

libressl does not support SSL_CTX_set_ciphersuites.

Browse Source
This commit is contained in:
Roger A. Light 2020-12-02 22:39:48 +00:00
parent 5b6c2c9d0b
commit 1636e47202
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/conf.c
View File

@ -1180,11 +1180,11 @@ int config__read_file_core(struct mosquitto__config *config, bool reload, struct
log__printf(NULL, MOSQ_LOG_WARNING, "Warning: TLS support not available."); log__printf(NULL, MOSQ_LOG_WARNING, "Warning: TLS support not available.");
#endif #endif
}else if(!strcmp(token, "ciphers_tls1.3")){ }else if(!strcmp(token, "ciphers_tls1.3")){
#ifdef WITH_TLS #if defined(WITH_TLS) && !defined(LIBRESSL_VERSION_NUMBER)
if(reload) continue; /* Listeners not valid for reloading. */ if(reload) continue; /* Listeners not valid for reloading. */
if(conf__parse_string(&token, "ciphers_tls1.3", &cur_listener->ciphers_tls13, saveptr)) return MOSQ_ERR_INVAL; if(conf__parse_string(&token, "ciphers_tls1.3", &cur_listener->ciphers_tls13, saveptr)) return MOSQ_ERR_INVAL;
#else #else
log__printf(NULL, MOSQ_LOG_WARNING, "Warning: TLS support not available."); log__printf(NULL, MOSQ_LOG_WARNING, "Warning: ciphers_tls1.3 support not available.");
#endif #endif
}else if(!strcmp(token, "clientid") || !strcmp(token, "remote_clientid")){ }else if(!strcmp(token, "clientid") || !strcmp(token, "remote_clientid")){
#ifdef WITH_BRIDGE #ifdef WITH_BRIDGE

2
src/net.c
View File

@ -394,7 +394,7 @@ int net__tls_server_ctx(struct mosquitto__listener *listener)
return MOSQ_ERR_TLS; return MOSQ_ERR_TLS;
} }
} }
#if OPENSSL_VERSION_NUMBER >= 0x10101000 #if OPENSSL_VERSION_NUMBER >= 0x10101000 && !defined(LIBRESSL_VERSION_NUMBER)
if(listener->ciphers_tls13){ if(listener->ciphers_tls13){
rc = SSL_CTX_set_ciphersuites(listener->ssl_ctx, listener->ciphers_tls13); rc = SSL_CTX_set_ciphersuites(listener->ssl_ctx, listener->ciphers_tls13);
if(rc == 0){ if(rc == 0){