forked from Lainports/freebsd-ports
aaf5878582
Use the provided getter routine instead of directly accessing the contents of the SSL struct, which is no longer exported as part of the ABI. Reviewed by: beat@ Approved by: beat@ Differential Revision: https://reviews.freebsd.org/D18325
20 lines
647 B
C
20 lines
647 B
C
--- src/network/ssl/socket.c.orig 2017-02-08 12:49:43 UTC
|
|
+++ src/network/ssl/socket.c
|
|
@@ -67,7 +67,7 @@ static void
|
|
ssl_set_no_tls(struct socket *socket)
|
|
{
|
|
#ifdef CONFIG_OPENSSL
|
|
- ((ssl_t *) socket->ssl)->options |= SSL_OP_NO_TLSv1;
|
|
+ SSL_set_options((ssl_t *) socket->ssl, SSL_OP_NO_TLSv1);
|
|
#elif defined(CONFIG_GNUTLS)
|
|
{
|
|
/* GnuTLS does not support SSLv2 because it is "insecure".
|
|
@@ -145,7 +145,7 @@
|
|
}
|
|
|
|
if (client_cert) {
|
|
- SSL_CTX *ctx = ((SSL *) socket->ssl)->ctx;
|
|
+ SSL_CTX *ctx = SSL_get_SSL_CTX(socket->ssl);
|
|
|
|
SSL_CTX_use_certificate_chain_file(ctx, client_cert);
|
|
SSL_CTX_use_PrivateKey_file(ctx, client_cert,
|