From e4d7941d90684379fa1b32db2c96bdb4be117560 Mon Sep 17 00:00:00 2001
From: Anton <anton@picapica>
Date: Tue, 4 Jun 2019 12:58:21 +0400
Subject: append @SECLEVEL=0 to the anon cipherlist string when building with
 OpenSSL >= 1.1.0, ADH ciphers are disabled by default in OpenSSL 1.1.0 branch

---
 PICA_node.c | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'PICA_node.c')

diff --git a/PICA_node.c b/PICA_node.c
index c38fd4a..0e9615d 100644
--- a/PICA_node.c
+++ b/PICA_node.c
@@ -1762,7 +1762,11 @@ int PICA_node_init()
 	if (ret != 1)
 		PICA_fatal("Failed to set DH parameters");
 
+#if OPENSSL_VERSION_NUMBER < 0x10100000L
 	ret = SSL_CTX_set_cipher_list(anon_ctx, PICA_TLS_ANONDHCIPHERLIST);
+#else
+	ret = SSL_CTX_set_cipher_list(anon_ctx, PICA_TLS_ANONDHCIPHERLIST "@SECLEVEL=0");
+#endif
 
 	if (!ret)
 		PICA_fatal("failed to set cipher list " PICA_TLS_ANONDHCIPHERLIST);
-- 
cgit v1.2.1