]> git.ipfire.org Git - thirdparty/haproxy.git/commitdiff
BUILD: ssl: fix compatibility with openssl without TLSEXT_signature_*
authorEmmanuel Hocdet <manu@gandi.net>
Wed, 19 Jul 2017 14:04:05 +0000 (16:04 +0200)
committerWilly Tarreau <w@1wt.eu>
Wed, 19 Jul 2017 15:19:33 +0000 (17:19 +0200)
In openssl < 1.0.1, TLSEXT_signature_* is undefined. Add TLSEXT signatures
(RFC 5246) when TLSEXT_signature_anonymous is undefined.

include/proto/openssl-compat.h

index 6ff4fddc04b6dcc5dda0ba161d94298fe213102a..a1e75b47bca18268bd43f2a3ace4673a6ad5793a 100644 (file)
@@ -192,4 +192,13 @@ static inline int EVP_PKEY_base_id(EVP_PKEY *pkey)
 #define RAND_pseudo_bytes(x,y) RAND_bytes(x,y)
 #endif
 
+
+/* Signature from RFC 5246, missing in openssl < 1.0.1 */
+#ifndef TLSEXT_signature_anonymous
+#define TLSEXT_signature_anonymous  0
+#define TLSEXT_signature_rsa        1
+#define TLSEXT_signature_dsa        2
+#define TLSEXT_signature_ecdsa      3
+#endif
+
 #endif /* _PROTO_OPENSSL_COMPAT_H */