libressl/portable

SSL_set1_sigalgs_list() is missing in LibreSSL-3.7.x

orbea opened this issue · 0 comments

orbea commented

Both hostapd and wpa_supplicant which use the same code base fail because SSL_set1_sigalgs_list() (And SSL_set_cert_cb(), see: #534) is missing.

../src/crypto/tls_openssl.c: In function 'tls_set_conn_flags':
../src/crypto/tls_openssl.c:3265:21: error: implicit declaration of function 'SSL_set1_sigalgs_list'; did you mean 'SSL_set1_groups_list'? [-Werror=implicit-function-declaration]
 3265 |                 if (SSL_set1_sigalgs_list(ssl, algs) != 1) {
      |                     ^~~~~~~~~~~~~~~~~~~~~
      |                     SSL_set1_groups_list
../src/crypto/tls_openssl.c:3274:17: error: implicit declaration of function 'SSL_set_cert_cb'; did you mean 'SSL_set_verify'? [-Werror=implicit-function-declaration]
 3274 |                 SSL_set_cert_cb(ssl, suiteb_cert_cb, conn);
      |                 ^~~~~~~~~~~~~~~
      |                 SSL_set_verify
cc1: some warnings being treated as errors
make: *** [../src/build.rules:86: /var/tmp/portage/net-wireless/wpa_supplicant-9999/work/wpa_supplicant-9999/build/wpa_supplicant/src/crypto/tls_openssl.o] Error 1

This was tested with their current git: https://w1.fi/cgit/hostap/commit/?id=73372322038d2617f2be4542c0f2a5fa846fe911

OpenSSL documents the SSL_set1_sigalgs_list() function here:
https://www.openssl.org/docs/man1.1.1/man3/SSL_set1_sigalgs_list.html