diff --git a/src/ssl_sock.c b/src/ssl_sock.c index bcfa3e712..91725a955 100644 --- a/src/ssl_sock.c +++ b/src/ssl_sock.c @@ -5031,7 +5031,7 @@ int ssl_sock_prepare_ctx(struct bind_conf *bind_conf, struct ssl_bind_conf *ssl_ if (ssl_conf_cur) SSL_CTX_set_alpn_select_cb(ctx, ssl_sock_advertise_alpn_protos, ssl_conf_cur); #endif -#if HA_OPENSSL_VERSION_NUMBER >= 0x1000200fL +#if ((HA_OPENSSL_VERSION_NUMBER >= 0x1000200fL) || defined(LIBRESSL_VERSION_NUMBER)) conf_curves = (ssl_conf && ssl_conf->curves) ? ssl_conf->curves : bind_conf->ssl_conf.curves; if (conf_curves) { if (!SSL_CTX_set1_curves_list(ctx, conf_curves)) { @@ -8476,7 +8476,7 @@ static int bind_parse_crl_file(char **args, int cur_arg, struct proxy *px, struc /* parse the "curves" bind keyword keyword */ static int ssl_bind_parse_curves(char **args, int cur_arg, struct proxy *px, struct ssl_bind_conf *conf, char **err) { -#if HA_OPENSSL_VERSION_NUMBER >= 0x1000200fL +#if ((HA_OPENSSL_VERSION_NUMBER >= 0x1000200fL) || defined(LIBRESSL_VERSION_NUMBER)) if (!*args[cur_arg + 1]) { if (err) memprintf(err, "'%s' : missing curve suite", args[cur_arg]);