From: Jeremy Harris <jgh146exb@wizmail.org>
Date: Sun, 21 May 2017 15:51:24 +0000 (+0100)
Subject: TLS: do not use DH_bits for LibreSSL; it is not supported (as of LibreSSL 2.3.2)
X-Git-Tag: exim-4_90_RC1~151
X-Git-Url: https://git.exim.org/users/heiko/exim.git/commitdiff_plain/refs/remotes/pdp/master?ds=sidebyside;hp=8b6b06fe3e009cb89ae7923b890e75f9dcd50118

TLS: do not use DH_bits for LibreSSL; it is not supported (as of LibreSSL 2.3.2)
---

diff --git a/src/src/tls-openssl.c b/src/src/tls-openssl.c
index 083826674..66483704c 100644
--- a/src/src/tls-openssl.c
+++ b/src/src/tls-openssl.c
@@ -46,7 +46,6 @@ functions from the OpenSSL library. */
 #endif
 #if OPENSSL_VERSION_NUMBER >= 0x10100000L
 # define EXIM_HAVE_OCSP_RESP_COUNT
-# define EXIM_HAVE_OPENSSL_DH_BITS
 #else
 # define EXIM_HAVE_EPHEM_RSA_KEX
 # define EXIM_HAVE_RAND_PSEUDO
@@ -70,6 +69,7 @@ functions from the OpenSSL library. */
 #ifndef LIBRESSL_VERSION_NUMBER
 # if OPENSSL_VERSION_NUMBER >= 0x010100000L
 #  define EXIM_HAVE_OPENSSL_CHECKHOST
+#  define EXIM_HAVE_OPENSSL_DH_BITS
 # endif
 # if OPENSSL_VERSION_NUMBER >= 0x010000000L \
     && (OPENSSL_VERSION_NUMBER & 0x0000ff000L) >= 0x000002000L