SSL_CTX_set_psk_find_session_callback was added in OpenSSL 1.1.1

diff --git a/src/main/cb.c b/src/main/cb.c
index e86d919b7ce637384577483d03749479a713f208..686c8a0dcb1c01000d29e1f45ffd4735dbf5e1b1 100644 (file)
--- a/src/main/cb.c
+++ b/src/main/cb.c
@@ -363,6 +363,7 @@ unsigned int psk_server_callback(SSL *ssl, const char *identity, unsigned char *
        return fr_hex2bin(psk, max_psk_len, conf->psk_password, psk_len);
 }
 
+#if OPENSSL_VERSION_NUMBER >= 0x10101000
 /** Check that a whole string is valid utf8
  * @param str input string.
  * @param inlen length of input string.
@@ -451,3 +452,4 @@ int cbtls_psk_find_session(SSL *ssl, const unsigned char *id, size_t idlen, SSL_
 }
 #endif
 #endif
+#endif

diff --git a/src/main/tls.c b/src/main/tls.c
index 035cd4f6f9eec18301ca3cddfe79bd44ac41f970..2a348eb9bb8058a5682243d09ab7c958ace32f7f 100644 (file)
--- a/src/main/tls.c
+++ b/src/main/tls.c
@@ -3952,7 +3952,9 @@ SSL_CTX *tls_init_ctx(fr_tls_server_conf_t *conf, int client, char const *chain_
         */
        if (!client && (conf->psk_identity || conf->psk_query)) {
                SSL_CTX_set_psk_server_callback(ctx, psk_server_callback);
+#if OPENSSL_VERSION_NUMBER >= 0x10101000
                SSL_CTX_set_psk_find_session_callback(ctx, cbtls_psk_find_session);
+#endif
        }
 
        /*