]> git.ipfire.org Git - thirdparty/haproxy.git/commitdiff
BUILD: ssl: more cleaner approach to WolfSSL without renegotiation
authorWilliam Lallemand <wlallemand@haproxy.com>
Tue, 28 Jan 2025 19:55:20 +0000 (20:55 +0100)
committerWilliam Lallemand <wlallemand@haproxy.com>
Tue, 28 Jan 2025 19:55:20 +0000 (20:55 +0100)
Patch discussed in https://github.com/wolfSSL/wolfssl/issues/6834

When building Wolfssl without renegotiation options, WolfSSL still
defines the macros about it, which warns during the build.

This patch completes the previous one by undefining the macros so
haproxy could build without any warning.

include/haproxy/openssl-compat.h

index adbe284a2f0583f0a659f2966bd334c99a424804..ba3fd4e500eb13e829336ebd06632ac36d421ccc 100644 (file)
@@ -418,8 +418,11 @@ static inline unsigned long ERR_peek_error_func(const char **func)
 #endif
 
 /* needs OpenSSL >= 0.9.7 and renegotation options on WolfSSL */
-#if !defined(SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION) && !defined(HAVE_SECURE_RENEGOTIATION) && !defined(HAVE_SERVER_RENEGOTIATION_INFO)
+#if !defined(SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION) || \
+        (defined(USE_OPENSSL_WOLFSSL) && !defined(HAVE_SECURE_RENEGOTIATION) && !defined(HAVE_SERVER_RENEGOTIATION_INFO))
+#undef  SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION
 #define SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION 0
+#undef  SSL_renegotiate_pending
 #define SSL_renegotiate_pending(arg) 0
 #endif