Here's a small tweak to lib/vtls/openssl.c:
SSL_CTX_set1_curves_list() has been available since LibreSSL 2.5.3,
released five years ago. I suggest simply dropping the LibreSSL
check.
Alternatively, you can check for
defined(LIBRESSL_VERSION_NUMBER) && LIBRESSL_VERSION_NUMBER >= 0x2050300fL
--- lib/vtls/openssl.c.orig
+++ lib/vtls/openssl.c
@@ -217,8 +217,7 @@
* BoringSSL: supported since 5fd1807d95f7 (committed 2016-09-30)
* LibreSSL: not tested.
*/
-#if ((OPENSSL_VERSION_NUMBER >= 0x10002000L) && \
- !defined(LIBRESSL_VERSION_NUMBER)) || \
+#if (OPENSSL_VERSION_NUMBER >= 0x10002000L) || \
defined(OPENSSL_IS_BORINGSSL)
#define HAVE_SSL_CTX_SET_EC_CURVES
#endif
--
Christian "naddy" Weisgerber [email protected]
--
Unsubscribe: https://lists.haxx.se/listinfo/curl-library
Etiquette: https://curl.haxx.se/mail/etiquette.html
