Added some <openssl/ssl.h> functions - Githubissues

envoyproxy / envoy-openssl

Envoy OpenSSL extensions

Apache License 2.0

47 stars 45 forks source link

Added some <openssl/ssl.h> functions #89

Closed tedjpoole closed 1 year ago

tedjpoole commented 1 year ago

Added the following functions:

SSL_SESSION_should_be_single_use()
SSL_set_ocsp_response()
SSL_set_renegotiate_mode()
SSL_set_SSL_CTX()
SSL_enable_ocsp_stapling()
SSL_error_description()
SSL_CTX_get0_certificate()
SSL_CIPHER_get_min_version()
SSL_CTX_set_select_certificate_cb()

Also:

Modified the copying & patching of BoringSSL files from the configure stage to the build stage, so that it can happen after the prefixing of the OpenSSL headers (required by the patching of nid.h and ssl.h).
Fixed BN_bn2hex() and the BNTest.BN test so that they use lower case hex values, to match what BoringSSL does.

Signed-off-by: Ted Poole tpoole@redhat.com