|
|
@ -0,0 +1,50 @@ |
|
|
|
--- a/lib/ssl_openssl.c
|
|
|
|
+++ b/lib/ssl_openssl.c
|
|
|
|
@@ -64,11 +64,17 @@ void ssl_init(void)
|
|
|
|
{ |
|
|
|
const SSL_METHOD *meth; |
|
|
|
|
|
|
|
+#if OPENSSL_VERSION_NUMBER < 0x10100000L
|
|
|
|
SSL_library_init(); |
|
|
|
|
|
|
|
meth = SSLv23_client_method(); |
|
|
|
ssl_ctx = SSL_CTX_new(meth); |
|
|
|
SSL_CTX_set_options(ssl_ctx, SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3); |
|
|
|
+#else
|
|
|
|
+ meth = TLS_client_method();
|
|
|
|
+ ssl_ctx = SSL_CTX_new(meth);
|
|
|
|
+ SSL_CTX_set_min_proto_version(ssl_ctx, TLS1_VERSION);
|
|
|
|
+#endif
|
|
|
|
|
|
|
|
initialized = TRUE; |
|
|
|
} |
|
|
|
@@ -300,20 +306,20 @@ size_t ssl_des3_encrypt(const unsigned c
|
|
|
|
const unsigned char *iv, unsigned char **res) |
|
|
|
{ |
|
|
|
int output_length = 0; |
|
|
|
- EVP_CIPHER_CTX ctx;
|
|
|
|
+ EVP_CIPHER_CTX *ctx;
|
|
|
|
|
|
|
|
*res = g_new0(unsigned char, 72); |
|
|
|
|
|
|
|
/* Don't set key or IV because we will modify the parameters */ |
|
|
|
- EVP_CIPHER_CTX_init(&ctx);
|
|
|
|
- EVP_CipherInit_ex(&ctx, EVP_des_ede3_cbc(), NULL, NULL, NULL, 1);
|
|
|
|
- EVP_CIPHER_CTX_set_key_length(&ctx, key_len);
|
|
|
|
- EVP_CIPHER_CTX_set_padding(&ctx, 0);
|
|
|
|
+ ctx = EVP_CIPHER_CTX_new();
|
|
|
|
+ EVP_CipherInit_ex(ctx, EVP_des_ede3_cbc(), NULL, NULL, NULL, 1);
|
|
|
|
+ EVP_CIPHER_CTX_set_key_length(ctx, key_len);
|
|
|
|
+ EVP_CIPHER_CTX_set_padding(ctx, 0);
|
|
|
|
/* We finished modifying parameters so now we can set key and IV */ |
|
|
|
- EVP_CipherInit_ex(&ctx, NULL, NULL, key, iv, 1);
|
|
|
|
- EVP_CipherUpdate(&ctx, *res, &output_length, input, input_len);
|
|
|
|
- EVP_CipherFinal_ex(&ctx, *res, &output_length);
|
|
|
|
- EVP_CIPHER_CTX_cleanup(&ctx);
|
|
|
|
+ EVP_CipherInit_ex(ctx, NULL, NULL, key, iv, 1);
|
|
|
|
+ EVP_CipherUpdate(ctx, *res, &output_length, input, input_len);
|
|
|
|
+ EVP_CipherFinal_ex(ctx, *res, &output_length);
|
|
|
|
+ EVP_CIPHER_CTX_free(ctx);
|
|
|
|
//EVP_cleanup(); |
|
|
|
|
|
|
|
return output_length; |