From 95a677c7f5db7927aa751d45bdcf7bf0fa55a8fc Mon Sep 17 00:00:00 2001
From: AviSoomirtee <avi@cyberstorm.mu>
Date: Sat, 25 May 2019 18:10:17 +0200
Subject: [PATCH] * src/openssl.c (ssl_init): post handshake auth for OpenSSL
Copyright-paperwork-exempt: Yes
---
src/openssl.c | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/src/openssl.c b/src/openssl.c
index 03737d7a..d8c5e05f 100644
--- a/src/openssl.c
+++ b/src/openssl.c
@@ -285,6 +285,12 @@ ssl_init (void)
if (ssl_options)
SSL_CTX_set_options (ssl_ctx, ssl_options);
+#if ((OPENSSL_VERSION_NUMBER >= 0x10101000L) && \
+ !defined(LIBRESSL_VERSION_NUMBER) && \
+ !defined(OPENSSL_IS_BORINGSSL))
+ SSL_CTX_set_post_handshake_auth (ssl_ctx, 1);
+#endif
+
#if !defined(LIBRESSL_VERSION_NUMBER) && (OPENSSL_VERSION_NUMBER >= 0x10100000L)
if (ssl_proto_version)
SSL_CTX_set_min_proto_version(ssl_ctx, ssl_proto_version);