forked from Lainports/opnsense-ports
37 lines
1 KiB
C
37 lines
1 KiB
C
--- ssl.c.orig 2021-08-02 06:24:35 UTC
|
|
+++ ssl.c
|
|
@@ -31,10 +31,10 @@
|
|
#include <errno.h>
|
|
#include <limits.h>
|
|
|
|
-static char* get_ssl_error();
|
|
+static char* get_ssl_error(void);
|
|
static SSL* get_ssl(struct vsf_session* p_sess, int fd);
|
|
static int ssl_session_init(struct vsf_session* p_sess);
|
|
-static void setup_bio_callbacks();
|
|
+static void setup_bio_callbacks(SSL* p_ssl);
|
|
static long bio_callback(
|
|
BIO* p_bio, int oper, const char* p_arg, int argi, long argl, long retval);
|
|
static int ssl_verify_callback(int verify_ok, X509_STORE_CTX* p_ctx);
|
|
@@ -93,10 +93,12 @@ ssl_init(struct vsf_session* p_sess)
|
|
{
|
|
options |= SSL_OP_NO_TLSv1_2;
|
|
}
|
|
+#ifdef SSL_OP_NO_TLSv1_3
|
|
if (!tunable_tlsv1_3)
|
|
{
|
|
options |= SSL_OP_NO_TLSv1_3;
|
|
}
|
|
+#endif
|
|
SSL_CTX_set_options(p_ctx, options);
|
|
if (tunable_rsa_cert_file)
|
|
{
|
|
@@ -683,7 +685,7 @@ ssl_cert_digest(SSL* p_ssl, struct vsf_session* p_sess
|
|
}
|
|
|
|
static char*
|
|
-get_ssl_error()
|
|
+get_ssl_error(void)
|
|
{
|
|
SSL_load_error_strings();
|
|
return ERR_error_string(ERR_get_error(), NULL);
|