upstream/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2025-12-20 23:00:56 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

- Fix remote control without certificate for LibreSSL

Browse source 
git-svn-id: file:///svn/unbound/trunk@3956 be551aaa-1e26-0410-a405-d3ace91eadb9
This commit is contained in:
Ralph Dolmans 2016-12-07 14:13:01 +00:00
parent e28903cb6d
commit f761bc3cdd
2 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
daemon/remote.c
View file

@ -146,7 +146,7 @@ timeval_divide(struct timeval* avg, const struct timeval* sum, size_t d)
* the command : "openssl dhparam -C 2048" * the command : "openssl dhparam -C 2048"
* (some openssl versions reject DH that is 'too small', eg. 512). * (some openssl versions reject DH that is 'too small', eg. 512).
*/ */
#if OPENSSL_VERSION_NUMBER < 0x10100000 #if OPENSSL_VERSION_NUMBER < 0x10100000 || defined(HAVE_LIBRESSL)
#ifndef S_SPLINT_S #ifndef S_SPLINT_S
static DH *get_dh2048(void) static DH *get_dh2048(void)
{ {
@ -256,7 +256,7 @@ daemon_remote_create(struct config_file* cfg)
/* in openssl 1.1, the securitylevel 0 allows eNULL, that /* in openssl 1.1, the securitylevel 0 allows eNULL, that
* does not need the DH */ * does not need the DH */
#if OPENSSL_VERSION_NUMBER < 0x10100000 #if OPENSSL_VERSION_NUMBER < 0x10100000 || defined(HAVE_LIBRESSL)
/* Since we have no certificates and hence no source of /* Since we have no certificates and hence no source of
* DH params, let's generate and set them * DH params, let's generate and set them
*/ */

1
doc/Changelog
View file

@ -1,5 +1,6 @@
7 December 2016: Ralph 7 December 2016: Ralph
- Add DSA support for OpenSSL 1.1.0 - Add DSA support for OpenSSL 1.1.0
- Fix remote control without cert for LibreSSL
6 December 2016: George 6 December 2016: George
- Added generic EDNS code for registering known EDNS option codes, - Added generic EDNS code for registering known EDNS option codes,