The OpenSSL version check should not have been limited to 1.0.2 only.
Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
if tls.startswith("OpenSSL") and "build=OpenSSL 1.0.2" in tls and "run=OpenSSL 1.0.2" in tls:
logger.info("Add Brainpool EC groups since OpenSSL is new enough")
groups += [ 27, 28, 29, 30 ]
+ if tls.startswith("OpenSSL") and "build=OpenSSL 1.1" in tls and "run=OpenSSL 1.1" in tls:
+ logger.info("Add Brainpool EC groups since OpenSSL is new enough")
+ groups += [ 27, 28, 29, 30 ]
for i in groups:
logger.info("Group %d" % i)
params['pwd_group'] = str(i)