konevsa/haproxy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

MINOR: ssl: show methods supported by openssl

Browse Source 
TLS v1.3 incoming, SSLv3 will disappears: it could be useful to list
all methods supported by haproxy/openssl (with -vvv).
This commit is contained in:
Emmanuel Hocdet 2017-03-24 15:20:03 +01:00 committed by Willy Tarreau
parent 42fb980e53
commit 50e25e1dbc
1 changed files with 19 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
src/ssl_sock.c
View File

@ -7538,7 +7538,7 @@ static void __ssl_sock_init(void)
ptr = NULL;
memprintf(&ptr, "Built with OpenSSL version : "
#ifdef OPENSSL_IS_BORINGSSL
"BoringSSL\n");
"BoringSSL");
#else /* OPENSSL_IS_BORINGSSL */
OPENSSL_VERSION_TEXT
"\nRunning on OpenSSL version : %s%s",
@ -7564,6 +7564,24 @@ static void __ssl_sock_init(void)
#else
"no (version might be too old, 0.9.8f min needed)"
#endif
#endif
"", ptr);
memprintf(&ptr, "%s\nOpenSSL library supports : "
#if SSL_OP_NO_SSLv3
"SSLv3 "
#endif
#if SSL_OP_NO_TLSv1
"TLSv1.0 "
#endif
#if SSL_OP_NO_TLSv1_1
"TLSv1.1 "
#endif
#if SSL_OP_NO_TLSv1_2
"TLSv1.2 "
#endif
#if SSL_OP_NO_TLSv1_3
"TLSv1.3"
#endif
"", ptr);