Add ALPN support to libtls.

ok beck@ doug@

1 files changed, 9 insertions, 1 deletions

diff --git a/src/lib/libtls/tls.c b/src/lib/libtls/tls.c
index 857b8d0811..2584ceb88b 100644
--- a/src/lib/libtls/tls.c
+++ b/src/lib/libtls/tls.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: tls.c,v 1.41 2016/07/07 14:09:03 jsing Exp $ */
+/* $OpenBSD: tls.c,v 1.42 2016/08/01 17:32:19 jsing Exp $ */
 /*
  * Copyright (c) 2014 Joel Sing <jsing@openbsd.org>
  *
@@ -310,6 +310,14 @@ tls_configure_ssl(struct tls *ctx)
         if ((ctx->config->protocols & TLS_PROTOCOL_TLSv1_2) == 0)
                 SSL_CTX_set_options(ctx->ssl_ctx, SSL_OP_NO_TLSv1_2);
 
+        if (ctx->config->alpn != NULL) {
+                if (SSL_CTX_set_alpn_protos(ctx->ssl_ctx, ctx->config->alpn,
+                    ctx->config->alpn_len) != 0) {
+                        tls_set_errorx(ctx, "failed to set alpn");
+                        goto err;
+                }
+        }
+
         if (ctx->config->ciphers != NULL) {
                 if (SSL_CTX_set_cipher_list(ctx->ssl_ctx,
                     ctx->config->ciphers) != 1) {