summaryrefslogtreecommitdiffstats
path: root/openbsd-compat
diff options
context:
space:
mode:
authorDamien Miller <djm@mindrot.org>2023-03-24 05:23:05 +0100
committerDamien Miller <djm@mindrot.org>2023-03-24 05:26:26 +0100
commit3c527d55f906e6970d17c4cab6db90ae9e013235 (patch)
tree1003fce87483f2d2bc927f014a38f8d6d3941a3a /openbsd-compat
parentput back SSLeay_version compat in configure test (diff)
downloadopenssh-3c527d55f906e6970d17c4cab6db90ae9e013235.tar.xz
openssh-3c527d55f906e6970d17c4cab6db90ae9e013235.zip
Allow building with BoringSSL
Diffstat (limited to 'openbsd-compat')
-rw-r--r--openbsd-compat/openssl-compat.h9
1 files changed, 9 insertions, 0 deletions
diff --git a/openbsd-compat/openssl-compat.h b/openbsd-compat/openssl-compat.h
index d0dd2c345..f6796b3ba 100644
--- a/openbsd-compat/openssl-compat.h
+++ b/openbsd-compat/openssl-compat.h
@@ -55,6 +55,15 @@ void ssh_libcrypto_init(void);
# endif
#endif
+#ifdef OPENSSL_IS_BORINGSSL
+/*
+ * BoringSSL (rightly) got rid of the BN_FLG_CONSTTIME flag, along with
+ * the entire BN_set_flags() interface.
+ * https://boringssl.googlesource.com/boringssl/+/0a211dfe9
+ */
+# define BN_set_flags(a, b)
+#endif
+
#ifndef HAVE_EVP_CIPHER_CTX_GET_IV
# ifdef HAVE_EVP_CIPHER_CTX_GET_UPDATED_IV
# define EVP_CIPHER_CTX_get_iv EVP_CIPHER_CTX_get_updated_iv