]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MINOR: ssl: Remove call to SSL_CTX_set_tlsext_ticket_key_cb with OpenSSLv3
authorRemi Tricot-Le Breton <rlebreton@haproxy.com>
Tue, 8 Feb 2022 16:45:58 +0000 (17:45 +0100)
committerWilliam Lallemand <wlallemand@haproxy.org>
Wed, 9 Feb 2022 11:11:31 +0000 (12:11 +0100)
commit8ea1f5f6cd4fda36748dd5b7178957c0779e9a58
tree0250ce78c5d7cd6cb4528974f6001f426516644a
parent3f269bb3709c3c4bc83c35bd1719a6bbea6506e5
MINOR: ssl: Remove call to SSL_CTX_set_tlsext_ticket_key_cb with OpenSSLv3

SSL_CTX_set_tlsext_ticket_key_cb was deprecated on OpenSSLv3 because it
uses an HMAC_pointer which is deprecated as well. According to the v3's
manpage it should be replaced by SSL_CTX_set_tlsext_ticket_key_evp_cb
which uses a EVP_MAC_CTX pointer.
This new callback was introduced in OpenSSLv3 so we need to keep the two
calls in the source base and to split the usage depending on the OpenSSL
version.
include/haproxy/openssl-compat.h
src/ssl_sock.c