Merge pull request #2278 from synqa/support-libressl

Add CI for LibreSSL and update some API
Support SSL_get1_supported_ciphers() on LibreSSL above v2.9.1
2026-07-21 19:01:32 +03:00 · 2026-06-10 16:27:40 +02:00 · 2026-06-10 18:09:16 +09:00 · 2026-06-10 18:08:36 +09:00 · 2026-06-10 18:05:40 +09:00 · 2026-06-10 18:05:40 +09:00
3 changed files with 35 additions and 4 deletions
@@ -0,0 +1,31 @@
+name: LibreSSL
+
+on: [push, pull_request]
+
+permissions:
+  contents: read
+
+jobs:
+  libressl:
+    runs-on: ubuntu-latest
+    container:
+      image: alpine:latest
+
+    steps:
+      - name: Install dependencies
+        run: apk add binutils --no-cache build-base git readline-dev libressl-dev ncurses-dev git cmake zlib-dev libsodium-dev gnu-libiconv
+
+      - uses: actions/checkout@v6
+        with:
+          submodules: true
+
+      - name: Configure
+        run: ./configure
+
+      - name: Make
+        run: make -j $(nproc)  -C build
+
+      - name: Test
+        run: |
+          .ci/memory-leak-test.sh
+          .ci/vpntools-check.sh
@@ -129,7 +129,7 @@
 // Macro
 #define	HASHED_DATA(p)			(((UCHAR *)p) + 15)

-#if OPENSSL_VERSION_NUMBER >= 0x10100000L && !defined(LIBRESSL_VERSION_NUMBER)
+#if (OPENSSL_VERSION_NUMBER >= 0x10100000L && !defined(LIBRESSL_VERSION_NUMBER)) || LIBRESSL_VERSION_NUMBER >= 0x3080100L
 typedef struct PKCS12_st PKCS12;
 typedef struct evp_md_st EVP_MD;
 #else
@@ -11852,7 +11852,7 @@ bool StartSSLEx3(SOCK *sock, X *x, K *priv, LIST *chain, UINT ssl_timeout, char
 			}
 		}

-#if OPENSSL_VERSION_NUMBER >= 0x10100000L && !defined(LIBRESSL_VERSION_NUMBER)
+#if (OPENSSL_VERSION_NUMBER >= 0x10100000L && !defined(LIBRESSL_VERSION_NUMBER)) ||  LIBRESSL_VERSION_NUMBER >= 0x3060000L
 		if (sock->SslAcceptSettings.Override_Security_Level)
 		{
 			SSL_CTX_set_security_level(ssl_ctx, sock->SslAcceptSettings.Override_Security_Level_Value);
@@ -16262,7 +16262,7 @@ UINT GetOSSecurityLevel()
 	}


-#if OPENSSL_VERSION_NUMBER >= 0x10100000L && !defined(LIBRESSL_VERSION_NUMBER)
+#if (OPENSSL_VERSION_NUMBER >= 0x10100000L && !defined(LIBRESSL_VERSION_NUMBER)) || LIBRESSL_VERSION_NUMBER >= 0x3060000L
 	security_level_new = SSL_CTX_get_security_level(ctx);
 #endif

@@ -16346,7 +16346,7 @@ TOKEN_LIST *GetCipherList()
 		return ciphers;
 	}

-#if OPENSSL_VERSION_NUMBER >= 0x10100000L && !defined(LIBRESSL_VERSION_NUMBER)
+#if (OPENSSL_VERSION_NUMBER >= 0x10100000L && !defined(LIBRESSL_VERSION_NUMBER)) || LIBRESSL_VERSION_NUMBER >= 0x2090100L
 	sk = SSL_get1_supported_ciphers(ssl);
 #else
 	sk = SSL_get_ciphers(ssl);
Author	SHA1	Message	Date
Ilya Shipitsin	b1f7ef0004	Merge pull request #2278 from synqa/support-libressl Add CI for LibreSSL and update some API	2026-06-10 16:27:40 +02:00
synqa	bfcb6788a7	Support SSL_get1_supported_ciphers() on LibreSSL above v2.9.1 Upstream changed on add79fb32686c1e8baf10def36ae00f8ab91a52b.	2026-06-10 18:09:16 +09:00
synqa	3fda39dc45	Support security level API on LibreSSL above v3.6.0 See: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.0-relnotes.txt	2026-06-10 18:08:36 +09:00
synqa	576a627e60	Rename env_md_st to evp_md_st for LibreSSL above v3.8.1 Upstream changed on ccf80370e13df3645f5a40674dded2e94f8cb0e9.	2026-06-10 18:05:40 +09:00
synqa	9d5efa309a	Add CI for LibreSSL When libressl-dev package is installed on Alpine Linux, LibreSSL is used by default.	2026-06-10 18:05:40 +09:00