[Buildroot] [PATCH] package/libressl: always expose SSL_OP_NO_TLSv1_3
Francois Perrad
fperrad at gmail.com
Fri Aug 20 10:04:39 UTC 2021
Fixes the build of vsftpd 3.0.4
Signed-off-by: Francois Perrad <francois.perrad at gadz.org>
---
...0001-always-expose-SSL_OP_NO_TLSv1_3.patch | 37 +++++++++++++++++++
1 file changed, 37 insertions(+)
create mode 100644 package/libressl/0001-always-expose-SSL_OP_NO_TLSv1_3.patch
diff --git a/package/libressl/0001-always-expose-SSL_OP_NO_TLSv1_3.patch b/package/libressl/0001-always-expose-SSL_OP_NO_TLSv1_3.patch
new file mode 100644
index 000000000..f34ae8583
--- /dev/null
+++ b/package/libressl/0001-always-expose-SSL_OP_NO_TLSv1_3.patch
@@ -0,0 +1,37 @@
+always expose SSL_OP_NO_TLSv1_3
+
+like in OpenSSL, see https://github.com/openssl/openssl/blob/master/include/openssl/ssl.h.in#L399
+
+like SSL_OP_NO_DTLSv1_2, see commit "Expose various DTLSv1.2 specific functions and defines"
+
+this change fixes the compilation of vsftpd 3.0.4 & 3.0.5, which fails with the following error:
+```
+ssl.c: In function 'ssl_init':
+ssl.c:98:18: error: 'SSL_OP_NO_TLSv1_3' undeclared (first use in this function); did you mean 'SSL_OP_NO_TLSv1_1'?
+```
+
+Signed-off-by: Francois Perrad <francois.perrad at gadz.org>
+Fetched from: https://github.com/libressl-portable/openbsd/pull/124
+---
+ include/openssl/ssl.h | 4 ----
+ 1 file changed, 4 deletions(-)
+
+diff --git a/include/openssl/ssl.h b/include/openssl/ssl.h
+index 46f24b2ea..4048a6e63 100644
+--- a/include/openssl/ssl.h
++++ b/include/openssl/ssl.h
+@@ -516,11 +516,7 @@ typedef int (*tls_session_secret_cb_fn)(SSL *s, void *secret, int *secret_len,
+ #define SSL_OP_NO_TLSv1 0x04000000L
+ #define SSL_OP_NO_TLSv1_2 0x08000000L
+ #define SSL_OP_NO_TLSv1_1 0x10000000L
+-
+-#if defined(LIBRESSL_HAS_TLS1_3) || defined(LIBRESSL_INTERNAL)
+ #define SSL_OP_NO_TLSv1_3 0x20000000L
+-#endif
+-
+ #define SSL_OP_NO_DTLSv1 0x40000000L
+ #define SSL_OP_NO_DTLSv1_2 0x80000000L
+
+--
+2.30.2
+
--
2.30.2
More information about the buildroot
mailing list