From effa8b8562d5e4b017570815c7e4d8faa0dd9a9e Mon Sep 17 00:00:00 2001 From: akallabeth Date: Thu, 22 Nov 2018 19:10:05 +0100 Subject: [PATCH] Fix #5049: Libressl declares OPENSSL_VERSION_NUMBER too high Need to check specifically for LIBRESSL_VERSION_NUMBER as they set the version higher than OpenSSL 1.1 but without API support. --- libfreerdp/crypto/tls.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/libfreerdp/crypto/tls.c b/libfreerdp/crypto/tls.c index 76f51701fe..ded41f127e 100644 --- libfreerdp/crypto/tls.c +++ libfreerdp/crypto/tls.c @@ -655,8 +655,7 @@ static BOOL tls_prepare(rdpTls* tls, BIO* underlying, SSL_METHOD* method, SSL_CTX_set_max_proto_version(tls->ctx, 0); /* highest supported version by library */ #endif - -#if OPENSSL_VERSION_NUMBER >= 0x10100000L || defined(LIBRESSL_VERSION_NUMBER) +#if OPENSSL_VERSION_NUMBER >= 0x10100000L && !defined(LIBRESSL_VERSION_NUMBER) SSL_CTX_set_security_level(tls->ctx, settings->TlsSecLevel); #endif