grahamedgecombe / nginx-ct

Certificate Transparency module for nginx.
https://grahamedgecombe.com/projects/nginx-ct
ISC License
175 stars 27 forks source link

Fix build with LibreSSL #17

Closed Sp1l closed 7 years ago

Sp1l commented 7 years ago

Same approach as for BoringSSL

Sp1l commented 7 years ago

As applied for HardenedBSD (FreeBSD derivative, default LibreSSL in base) https://github.com/HardenedBSD/hardenedbsd-ports/commit/9b7ec1cd853bdab3da253c529fc125cf8773e197

grahamedgecombe commented 7 years ago

Does this actually work?

LibreSSL 2.5.1 (the latest version) doesn't provide SSL_CTX_set_signed_cert_timestamp_list or SSL_CTX_add_server_custom_ext.

grahamedgecombe commented 7 years ago

I'd be happy to merge this if LibreSSL does provide the required functions, but I don't think it does. Closing for now but feel free to re-open if I'm mistaken (e.g. does HardenedBSD use a fork of LibreSSL which adds the required functions?)