haproxy: fix libressl-2.5
This commit is contained in:
parent
4c0ba16c25
commit
9458852924
46
srcpkgs/haproxy/patches/fix-libressl-2.5.patch
Normal file
46
srcpkgs/haproxy/patches/fix-libressl-2.5.patch
Normal file
@ -0,0 +1,46 @@
|
|||||||
|
--- src/ssl_sock.c.orig 2017-01-13 09:03:00 UTC
|
||||||
|
+++ src/ssl_sock.c
|
||||||
|
@@ -792,8 +792,11 @@ static int ssl_sock_load_ocsp(SSL_CTX *c
|
||||||
|
ocsp = NULL;
|
||||||
|
|
||||||
|
#ifndef SSL_CTX_get_tlsext_status_cb
|
||||||
|
-# define SSL_CTX_get_tlsext_status_cb(ctx, cb) \
|
||||||
|
- *cb = (void (*) (void))ctx->tlsext_status_cb;
|
||||||
|
+#ifndef SSL_CTRL_GET_TLSEXT_STATUS_REQ_CB
|
||||||
|
+#define SSL_CTRL_GET_TLSEXT_STATUS_REQ_CB 128
|
||||||
|
+#endif
|
||||||
|
+#define SSL_CTX_get_tlsext_status_cb(ctx, cb) \
|
||||||
|
+ *cb = SSL_CTX_ctrl(ctx,SSL_CTRL_GET_TLSEXT_STATUS_REQ_CB,0, (void (**)(void))cb)
|
||||||
|
#endif
|
||||||
|
SSL_CTX_get_tlsext_status_cb(ctx, &callback);
|
||||||
|
|
||||||
|
@@ -821,7 +824,10 @@ static int ssl_sock_load_ocsp(SSL_CTX *c
|
||||||
|
int key_type;
|
||||||
|
EVP_PKEY *pkey;
|
||||||
|
|
||||||
|
-#ifdef SSL_CTX_get_tlsext_status_arg
|
||||||
|
+#if defined(SSL_CTX_get_tlsext_status_arg) || defined(LIBRESSL_VERSION_NUMBER)
|
||||||
|
+#ifndef SSL_CTRL_GET_TLSEXT_STATUS_REQ_CB_ARG
|
||||||
|
+#define SSL_CTRL_GET_TLSEXT_STATUS_REQ_CB_ARG 129
|
||||||
|
+#endif
|
||||||
|
SSL_CTX_ctrl(ctx, SSL_CTRL_GET_TLSEXT_STATUS_REQ_CB_ARG, 0, &cb_arg);
|
||||||
|
#else
|
||||||
|
cb_arg = ctx->tlsext_status_arg;
|
||||||
|
@@ -3537,7 +3543,7 @@ int ssl_sock_handshake(struct connection
|
||||||
|
OSSL_HANDSHAKE_STATE state = SSL_get_state((SSL *)conn->xprt_ctx);
|
||||||
|
empty_handshake = state == TLS_ST_BEFORE;
|
||||||
|
#else
|
||||||
|
- empty_handshake = !((SSL *)conn->xprt_ctx)->packet_length;
|
||||||
|
+ empty_handshake = SSL_state((SSL *)conn->xprt_ctx) == SSL_ST_BEFORE;
|
||||||
|
#endif
|
||||||
|
|
||||||
|
if (empty_handshake) {
|
||||||
|
@@ -3615,7 +3621,7 @@ int ssl_sock_handshake(struct connection
|
||||||
|
state = SSL_get_state((SSL *)conn->xprt_ctx);
|
||||||
|
empty_handshake = state == TLS_ST_BEFORE;
|
||||||
|
#else
|
||||||
|
- empty_handshake = !((SSL *)conn->xprt_ctx)->packet_length;
|
||||||
|
+ empty_handshake = SSL_state((SSL *)conn->xprt_ctx) == SSL_ST_BEFORE;
|
||||||
|
#endif
|
||||||
|
if (empty_handshake) {
|
||||||
|
if (!errno) {
|
@ -1,8 +1,7 @@
|
|||||||
# Template file for 'haproxy'
|
# Template file for 'haproxy'
|
||||||
broken="src/ssl_sock.c:798:28: error: 'SSL_CTX {aka struct ssl_ctx_st}' has no member named 'tlsext_status_cb'"
|
|
||||||
pkgname=haproxy
|
pkgname=haproxy
|
||||||
version=1.7.5
|
version=1.7.5
|
||||||
revision=2
|
revision=3
|
||||||
build_style=gnu-makefile
|
build_style=gnu-makefile
|
||||||
make_build_args="TARGET=linux2628 USE_PCRE=1 USE_PCRE_JIT=1 USE_ZLIB=1
|
make_build_args="TARGET=linux2628 USE_PCRE=1 USE_PCRE_JIT=1 USE_ZLIB=1
|
||||||
USE_OPENSSL=1 USE_LIBCRYPT=1 USE_GETADDRINFO=1 USE_LUA=1"
|
USE_OPENSSL=1 USE_LIBCRYPT=1 USE_GETADDRINFO=1 USE_LUA=1"
|
||||||
|
Loading…
x
Reference in New Issue
Block a user