From 186f4bec00eb37dbd7d14ba5aa02e90f8fcff087 Mon Sep 17 00:00:00 2001
From: jsing <>
Date: Tue, 6 Nov 2018 01:27:26 +0000
Subject: Start working towards adding feature flags (rather than anti-feature
 flags) for LibreSSL. Add a (commented out) feature flag for TLSv1.3 and
 define the OPENSSL_NO_TLS1_3 anti-feature flag based on the feature flag.

ok beck@ bluhm@ tb@
---
 src/lib/libcrypto/opensslfeatures.h | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

(limited to 'src/lib')

diff --git a/src/lib/libcrypto/opensslfeatures.h b/src/lib/libcrypto/opensslfeatures.h
index 2102b476f2..688d478dfd 100644
--- a/src/lib/libcrypto/opensslfeatures.h
+++ b/src/lib/libcrypto/opensslfeatures.h
@@ -1,3 +1,10 @@
+/*
+ * Feature flags for LibreSSL... so you can actually tell when things
+ * are enabled, rather than not being able to tell when things are
+ * enabled (or possibly not yet not implemented, or removed!).
+ */
+/* #define LIBRESSL_HAS_TLS1_3 */
+
 #define OPENSSL_THREADS
 
 #define OPENSSL_NO_BUF_FREELISTS
@@ -93,7 +100,9 @@
 /* #define OPENSSL_NO_TLS1_1_METHOD */
 /* #define OPENSSL_NO_TLS1_2 */
 /* #define OPENSSL_NO_TLS1_2_METHOD */
-/* #define OPENSSL_NO_TLS1_3 */
+#ifndef LIBRESSL_HAS_TLS1_3
+#define OPENSSL_NO_TLS1_3
+#endif
 /* #define OPENSSL_NO_TLS1_METHOD */
 /* #define OPENSSL_NO_TS */
 /* #define OPENSSL_NO_UI_CONSOLE */
-- 
cgit v1.2.3-55-g6feb