Start working towards adding feature flags (rather than anti-feature flags)

for LibreSSL. Add a (commented out) feature flag for TLSv1.3 and define the
OPENSSL_NO_TLS1_3 anti-feature flag based on the feature flag.

ok beck@ bluhm@ tb@

1 files changed, 10 insertions, 1 deletions

diff --git a/src/lib/libcrypto/opensslfeatures.h b/src/lib/libcrypto/opensslfeatures.h
index 2102b476f2..688d478dfd 100644
--- a/src/lib/libcrypto/opensslfeatures.h
+++ b/src/lib/libcrypto/opensslfeatures.h
@@ -1,3 +1,10 @@
+/*
+ * Feature flags for LibreSSL... so you can actually tell when things
+ * are enabled, rather than not being able to tell when things are
+ * enabled (or possibly not yet not implemented, or removed!).
+ */
+/* #define LIBRESSL_HAS_TLS1_3 */
+
 #define OPENSSL_THREADS
 
 #define OPENSSL_NO_BUF_FREELISTS
@@ -93,7 +100,9 @@
 /* #define OPENSSL_NO_TLS1_1_METHOD */
 /* #define OPENSSL_NO_TLS1_2 */
 /* #define OPENSSL_NO_TLS1_2_METHOD */
-/* #define OPENSSL_NO_TLS1_3 */
+#ifndef LIBRESSL_HAS_TLS1_3
+#define OPENSSL_NO_TLS1_3
+#endif
 /* #define OPENSSL_NO_TLS1_METHOD */
 /* #define OPENSSL_NO_TS */
 /* #define OPENSSL_NO_UI_CONSOLE */