diff --git a/include/proto/openssl-compat.h b/include/proto/openssl-compat.h index c56619951..f9ecc9955 100644 --- a/include/proto/openssl-compat.h +++ b/include/proto/openssl-compat.h @@ -182,4 +182,10 @@ static inline int EVP_PKEY_base_id(EVP_PKEY *pkey) #define RAND_pseudo_bytes(x,y) RAND_bytes(x,y) #endif +/* This function does nothing in 1.1.0 and doesn't exist in boringssl */ +#if defined(OPENSSL_IS_BORINGSSL) || (OPENSSL_VERSION_NUMBER >= 0x1010000fL) +#undef SSL_CTX_set_ecdh_auto +#define SSL_CTX_set_ecdh_auto(ctx, onoff) +#endif + #endif /* _PROTO_OPENSSL_COMPAT_H */ diff --git a/src/ssl_sock.c b/src/ssl_sock.c index 3d47149b7..232a4970f 100644 --- a/src/ssl_sock.c +++ b/src/ssl_sock.c @@ -3057,10 +3057,8 @@ int ssl_sock_prepare_ctx(struct bind_conf *bind_conf, struct ssl_bind_conf *ssl_ curproxy->id, conf_curves, bind_conf->arg, bind_conf->file, bind_conf->line); cfgerr++; } -#ifndef OPENSSL_IS_BORINGSSL else SSL_CTX_set_ecdh_auto(ctx, 1); -#endif } #endif #if defined(SSL_CTX_set_tmp_ecdh) && !defined(OPENSSL_NO_ECDH)