Provide SSL{,_CTX}_set_{min,max}_proto_version() functions.

Rides minor bump.

ok beck@

1 files changed, 47 insertions, 1 deletions

diff --git a/src/lib/libssl/ssl_versions.c b/src/lib/libssl/ssl_versions.c
index 6e17cdac6c..240a2498aa 100644
--- a/src/lib/libssl/ssl_versions.c
+++ b/src/lib/libssl/ssl_versions.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssl_versions.c,v 1.2 2017/05/06 16:18:36 jsing Exp $ */
+/* $OpenBSD: ssl_versions.c,v 1.3 2017/05/06 20:37:25 jsing Exp $ */
 /*
  * Copyright (c) 2016, 2017 Joel Sing <jsing@openbsd.org>
  *
@@ -35,6 +35,52 @@ ssl_clamp_version_range(uint16_t *min_ver, uint16_t *max_ver,
 }
 
 int
+ssl_version_set_min(const SSL_METHOD *meth, uint16_t ver, uint16_t max_ver,
+    uint16_t *out_ver)
+{
+        uint16_t min_version, max_version;
+
+        if (ver == 0) {
+                *out_ver = meth->internal->min_version;
+                return 1;
+        }
+
+        min_version = ver;
+        max_version = max_ver;
+
+        if (!ssl_clamp_version_range(&min_version, &max_version,
+            meth->internal->min_version, meth->internal->max_version))
+                return 0;
+
+        *out_ver = min_version;
+        
+        return 1;
+}
+
+int
+ssl_version_set_max(const SSL_METHOD *meth, uint16_t ver, uint16_t min_ver,
+    uint16_t *out_ver)
+{
+        uint16_t min_version, max_version;
+
+        if (ver == 0) {
+                *out_ver = meth->internal->max_version;
+                return 1;
+        }
+
+        min_version = min_ver;
+        max_version = ver;
+
+        if (!ssl_clamp_version_range(&min_version, &max_version,
+            meth->internal->min_version, meth->internal->max_version))
+                return 0;
+
+        *out_ver = max_version;
+        
+        return 1;
+}
+
+int
 ssl_enabled_version_range(SSL *s, uint16_t *min_ver, uint16_t *max_ver)
 {
         uint16_t min_version, max_version;