]> git.ipfire.org Git - thirdparty/haproxy.git/commitdiff
BUILD: quic: temporarly ignore chacha20_poly1305 for libressl
authorWilliam Lallemand <wlallemand@haproxy.org>
Fri, 2 Sep 2022 13:35:09 +0000 (15:35 +0200)
committerWilliam Lallemand <wlallemand@haproxy.org>
Wed, 7 Sep 2022 07:33:46 +0000 (09:33 +0200)
LibreSSL does not implement EVP_chacha20_poly1305() with EVP_CIPHER but
uses the EVP_AEAD API instead:

https://man.openbsd.org/EVP_AEAD_CTX_init

This patch disables this cipher for libreSSL for now.

include/haproxy/quic_tls.h

index c326ce9e81f0f2141e5c3fc33cec644b2a80bbea..02e155d00befd256ceab4e0070b4e10188bd520c 100644 (file)
@@ -135,8 +135,10 @@ static inline const EVP_CIPHER *tls_aead(const SSL_CIPHER *cipher)
                return EVP_aes_128_gcm();
        case TLS1_3_CK_AES_256_GCM_SHA384:
                return EVP_aes_256_gcm();
+#if !defined(LIBRESSL_VERSION_NUMBER)
        case TLS1_3_CK_CHACHA20_POLY1305_SHA256:
                return EVP_chacha20_poly1305();
+#endif
        case TLS1_3_CK_AES_128_CCM_SHA256:
                return EVP_aes_128_ccm();
        default: