From: William Lallemand <wlallemand@haproxy.org>
Date: Mon, 15 May 2023 12:42:28 +0000 (+0200)
Subject: BUILD: ssl: get0_verified chain is available on libreSSL
X-Git-Tag: v2.8-dev12~26
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=d0c363486cb2a9b0d4374fc236ff55f842a2a5e7;p=thirdparty%2Fhaproxy.git

BUILD: ssl: get0_verified chain is available on libreSSL

Define HAVE_SSL_get0_verified_chain when it's using libreSSL >= 3.3.6.
---

diff --git a/include/haproxy/openssl-compat.h b/include/haproxy/openssl-compat.h
index 6a8a62a034..7fb1538109 100644
--- a/include/haproxy/openssl-compat.h
+++ b/include/haproxy/openssl-compat.h
@@ -90,6 +90,10 @@
 
 #if (HA_OPENSSL_VERSION_NUMBER >= 0x10101000L)
 #define HAVE_SSL_KEYLOG
+#endif
+
+/* minimum OpenSSL 1.1.1 & libreSSL 3.3.6 */
+#if (defined(LIBRESSL_VERSION_NUMBER) && (LIBRESSL_VERSION_NUMBER >= 0x3030600L)) || (HA_OPENSSL_VERSION_NUMBER >= 0x10101000L)
 #define HAVE_SSL_get0_verified_chain
 #endif