Make use of SSL_set_min_proto_version().

This function has been available in LibreSSL for a while now.

ok sthen@
This commit is contained in:
jsing 2018-02-14 15:38:27 +00:00
parent 08ee273f72
commit 488222ef78
2 changed files with 2 additions and 13 deletions

View File

@ -1,6 +1,7 @@
# $OpenBSD: Makefile,v 1.37 2017/10/20 19:00:04 jca Exp $
# $OpenBSD: Makefile,v 1.38 2018/02/14 15:38:27 jsing Exp $
V = 2.8.9
REVISION = 0
PL = 16
COMMENT = text web browser
DISTNAME = lynx${V}dev.${PL}

View File

@ -1,12 +0,0 @@
$OpenBSD: patch-WWW_Library_Implementation_HTTP_c,v 1.1 2016/11/25 15:58:55 fcambus Exp $
--- WWW/Library/Implementation/HTTP.c.orig Thu Nov 17 10:11:54 2016
+++ WWW/Library/Implementation/HTTP.c Thu Nov 17 10:01:29 2016
@@ -926,7 +926,7 @@ static int HTLoadHTTP(const char *arg,
#elif SSLEAY_VERSION_NUMBER >= 0x0900
#ifndef USE_NSS_COMPAT_INCL
if (!try_tls) {
-#if OPENSSL_VERSION_NUMBER >= 0x10100000L
+#if OPENSSL_VERSION_NUMBER >= 0x10100000L && !defined(LIBRESSL_VERSION_NUMBER)
SSL_set_min_proto_version(handle, TLS1_1_VERSION);
#else
SSL_set_options(handle, SSL_OP_NO_TLSv1);