From e4d7941d90684379fa1b32db2c96bdb4be117560 Mon Sep 17 00:00:00 2001
From: Anton <anton@picapica>
Date: Tue, 4 Jun 2019 12:58:21 +0400
Subject: append @SECLEVEL=0 to the anon cipherlist string when building with
 OpenSSL >= 1.1.0, ADH ciphers are disabled by default in OpenSSL 1.1.0 branch

---
 PICA_client.c | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'PICA_client.c')

diff --git a/PICA_client.c b/PICA_client.c
index d589137..d7674db 100644
--- a/PICA_client.c
+++ b/PICA_client.c
@@ -1500,7 +1500,11 @@ int PICA_open_acc(const char *cert_file,
 	ret = SSL_CTX_set_cipher_list(a->ctx, PICA_TLS_CIPHERLIST);
 
 	if (ret == 1)
+#if OPENSSL_VERSION_NUMBER < 0x10100000L
 		ret = SSL_CTX_set_cipher_list(a->anon_ctx, PICA_TLS_ANONDHCIPHERLIST);
+#else
+		ret = SSL_CTX_set_cipher_list(a->anon_ctx, PICA_TLS_ANONDHCIPHERLIST "@SECLEVEL=0");
+#endif
 
 	if (ret != 1)
 	{
-- 
cgit v1.2.1