]> git.ipfire.org Git - thirdparty/haproxy.git/commitdiff
MINOR: ssl: show methods supported by openssl
authorEmmanuel Hocdet <manu@gandi.net>
Fri, 24 Mar 2017 14:20:03 +0000 (15:20 +0100)
committerWilly Tarreau <w@1wt.eu>
Fri, 12 May 2017 13:49:05 +0000 (15:49 +0200)
TLS v1.3 incoming, SSLv3 will disappears: it could be useful to list
all methods supported by haproxy/openssl (with -vvv).

src/ssl_sock.c

index 63c0f7928bf56c50378bf18aa1b30ba732b15689..5014e70b197afab014bfb11428760797f39954c9 100644 (file)
@@ -7538,7 +7538,7 @@ static void __ssl_sock_init(void)
        ptr = NULL;
        memprintf(&ptr, "Built with OpenSSL version : "
 #ifdef OPENSSL_IS_BORINGSSL
-               "BoringSSL\n");
+               "BoringSSL");
 #else /* OPENSSL_IS_BORINGSSL */
                OPENSSL_VERSION_TEXT
                "\nRunning on OpenSSL version : %s%s",
@@ -7564,6 +7564,24 @@ static void __ssl_sock_init(void)
 #else
                "no (version might be too old, 0.9.8f min needed)"
 #endif
+#endif
+              "", ptr);
+
+       memprintf(&ptr, "%s\nOpenSSL library supports : "
+#if SSL_OP_NO_SSLv3
+                 "SSLv3 "
+#endif
+#if SSL_OP_NO_TLSv1
+                 "TLSv1.0 "
+#endif
+#if SSL_OP_NO_TLSv1_1
+                 "TLSv1.1 "
+#endif
+#if SSL_OP_NO_TLSv1_2
+                 "TLSv1.2 "
+#endif
+#if SSL_OP_NO_TLSv1_3
+                 "TLSv1.3"
 #endif
               "", ptr);