summaryrefslogtreecommitdiff
path: root/src/lib/libssl/ssl_seclevel.c
diff options
context:
space:
mode:
Diffstat (limited to '')
-rw-r--r--src/lib/libssl/ssl_seclevel.c13
1 files changed, 12 insertions, 1 deletions
diff --git a/src/lib/libssl/ssl_seclevel.c b/src/lib/libssl/ssl_seclevel.c
index 6c788c205d..34cea637e0 100644
--- a/src/lib/libssl/ssl_seclevel.c
+++ b/src/lib/libssl/ssl_seclevel.c
@@ -1,4 +1,4 @@
1/* $OpenBSD: ssl_seclevel.c,v 1.5 2022/06/28 20:54:16 tb Exp $ */ 1/* $OpenBSD: ssl_seclevel.c,v 1.6 2022/06/29 08:27:51 tb Exp $ */
2/* 2/*
3 * Copyright (c) 2020 Theo Buehler <tb@openbsd.org> 3 * Copyright (c) 2020 Theo Buehler <tb@openbsd.org>
4 * 4 *
@@ -17,6 +17,7 @@
17 17
18#include <stddef.h> 18#include <stddef.h>
19 19
20#include <openssl/dh.h>
20#include <openssl/ossl_typ.h> 21#include <openssl/ossl_typ.h>
21#include <openssl/ssl.h> 22#include <openssl/ssl.h>
22#include <openssl/tls1.h> 23#include <openssl/tls1.h>
@@ -225,3 +226,13 @@ ssl_security(const SSL *ssl, int op, int bits, int nid, void *other)
225 return ssl->cert->security_cb(ssl, NULL, op, bits, nid, other, 226 return ssl->cert->security_cb(ssl, NULL, op, bits, nid, other,
226 ssl->cert->security_ex_data); 227 ssl->cert->security_ex_data);
227} 228}
229
230int
231ssl_security_dh(const SSL *ssl, DH *dh)
232{
233#if defined(LIBRESSL_HAS_SECURITY_LEVEL)
234 return ssl_security(ssl, SSL_SECOP_TMP_DH, DH_security_bits(dh), 0, dh);
235#else
236 return 1;
237#endif
238}