commit 747ca61693b28e33d7bf5994fee5675a45385635
author Emmanuel Hocdet <manu@gandi.net> Mon Oct 01 18:45:19 2018 +0200
committer Christopher Faulet <cfaulet@haproxy.com> Mon Oct 08 09:42:34 2018 +0200
tree d29b32e53a049557995e73d902a9929f544c4437
parent a9b84028e6e941e0c3b25cc01697d57df1cba13f

MINOR: ssl: generate-certificates for BoringSSL

include/proto/openssl-compat.h

diff --git a/include/proto/openssl-compat.h b/include/proto/openssl-compat.h
index 564d2b4..ffee2e4 100644
--- a/include/proto/openssl-compat.h
+++ b/include/proto/openssl-compat.h
@@ -153,7 +153,6 @@
 #endif
 
 #ifdef OPENSSL_IS_BORINGSSL
-#define SSL_NO_GENERATE_CERTIFICATES
 
 static inline int EVP_PKEY_base_id(EVP_PKEY *pkey)
 {

src/ssl_sock.c

diff --git a/src/ssl_sock.c b/src/ssl_sock.c
index bb62b67..c11acb3 100644
--- a/src/ssl_sock.c
+++ b/src/ssl_sock.c
@@ -1753,7 +1753,7 @@
 	else if (key_type == EVP_PKEY_EC)
 		digest = EVP_sha256();
 	else {
-#if (OPENSSL_VERSION_NUMBER >= 0x1000000fL)
+#if (OPENSSL_VERSION_NUMBER >= 0x1000000fL) && !defined(OPENSSL_IS_BORINGSSL)
 		int nid;
 
 		if (EVP_PKEY_get_default_digest_nid(capkey, &nid) <= 0)