BoringSSL: Comment out SSL_set1_sigalgs_list() call

It looks like BoringSSL claims to have OPENSSL_VERSION_NUMBER for a
1.1.0 version, but it does not provide SSL_set1_sigalgs_list(). For now,
comment out this regardless of the version BoringSSL claims to be.

Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>

diff --git a/src/crypto/tls_openssl.c b/src/crypto/tls_openssl.c
index beca18d2941bde35e6a1000cb1cdc562d050dab5..3f024840c94ad2a734310ec205a1d610fd07d59f 100644 (file)
--- a/src/crypto/tls_openssl.c
+++ b/src/crypto/tls_openssl.c
@@ -2499,12 +2499,14 @@ static int tls_set_conn_flags(struct tls_connection *conn, unsigned int flags)
                EC_KEY_free(ecdh);
        }
        if (flags & (TLS_CONN_SUITEB | TLS_CONN_SUITEB_NO_ECDH)) {
+#ifndef OPENSSL_IS_BORINGSSL
                /* ECDSA+SHA384 if need to add EC support here */
                if (SSL_set1_sigalgs_list(ssl, "RSA+SHA384") != 1) {
                        wpa_printf(MSG_INFO,
                                   "OpenSSL: Failed to set Suite B sigalgs");
                        return -1;
                }
+#endif /* OPENSSL_IS_BORINGSSL */
 
                SSL_set_options(ssl, SSL_OP_NO_TLSv1);
                SSL_set_options(ssl, SSL_OP_NO_TLSv1_1);