Closed Sp1l closed 7 years ago
As applied for HardenedBSD (FreeBSD derivative, default LibreSSL in base) https://github.com/HardenedBSD/hardenedbsd-ports/commit/9b7ec1cd853bdab3da253c529fc125cf8773e197
Does this actually work?
LibreSSL 2.5.1 (the latest version) doesn't provide SSL_CTX_set_signed_cert_timestamp_list
or SSL_CTX_add_server_custom_ext
.
I'd be happy to merge this if LibreSSL does provide the required functions, but I don't think it does. Closing for now but feel free to re-open if I'm mistaken (e.g. does HardenedBSD use a fork of LibreSSL which adds the required functions?)
Same approach as for BoringSSL