]> git.ipfire.org Git - thirdparty/hostap.git/commitdiff
OpenSSL: Fix build with BoringSSL
authorJouni Malinen <j@w1.fi>
Sat, 23 Apr 2022 10:05:49 +0000 (13:05 +0300)
committerJouni Malinen <j@w1.fi>
Sat, 23 Apr 2022 10:05:49 +0000 (13:05 +0300)
SSL_CTX_set_dh_auto() is not available in BoringSSL even though it
claims to be based on OpenSSL 1.1.1 in OPENSSL_VERSION_NUMBER.

Fixes: ebb3055e1302 ("OpenSSL: Generate DH parameters automatically if not set with dh_file")
Signed-off-by: Jouni Malinen <j@w1.fi>
src/crypto/tls_openssl.c

index 56681b25d04ec8f453f46e0e6f4b307c271f944e..6fe8169502879153ff46ad7df84a1f71b01c768e 100644 (file)
@@ -4052,7 +4052,7 @@ static int tls_global_dh(struct tls_data *data, const char *dh_file)
        if (!ssl_ctx)
                return -1;
        if (!dh_file) {
-#if OPENSSL_VERSION_NUMBER >= 0x10100000L
+#if OPENSSL_VERSION_NUMBER >= 0x10100000L && !defined(OPENSSL_IS_BORINGSSL)
                SSL_CTX_set_dh_auto(ssl_ctx, 1);
 #endif
                return 0;