aboutsummaryrefslogtreecommitdiff
path: root/usr.sbin/rpc.tlsclntd
diff options
context:
space:
mode:
authorRick Macklem <rmacklem@FreeBSD.org>2023-06-01 20:43:00 +0000
committerRick Macklem <rmacklem@FreeBSD.org>2023-06-01 20:43:00 +0000
commit88ea962879be7f989b263ad6d6686d72d888253a (patch)
tree8a04c652d2ba3586e5e1600cef5f5d5cdbdfbe4d /usr.sbin/rpc.tlsclntd
parentfe590ffe40f49fe09d8275fbf29f0d46c5b99dc7 (diff)
Diffstat (limited to 'usr.sbin/rpc.tlsclntd')
-rw-r--r--usr.sbin/rpc.tlsclntd/rpc.tlsclntd.c10
1 files changed, 4 insertions, 6 deletions
diff --git a/usr.sbin/rpc.tlsclntd/rpc.tlsclntd.c b/usr.sbin/rpc.tlsclntd/rpc.tlsclntd.c
index bdb6be6c0222..e6784576982a 100644
--- a/usr.sbin/rpc.tlsclntd/rpc.tlsclntd.c
+++ b/usr.sbin/rpc.tlsclntd/rpc.tlsclntd.c
@@ -299,7 +299,6 @@ main(int argc, char **argv)
rpctls_syscall(RPCTLS_SYSC_CLSHUTDOWN, "");
SSL_CTX_free(rpctls_ctx);
- EVP_cleanup();
return (0);
}
@@ -480,17 +479,12 @@ rpctls_setupcl_ssl(void)
size_t len, rlen;
int ret;
- SSL_library_init();
- SSL_load_error_strings();
- OpenSSL_add_all_algorithms();
-
ctx = SSL_CTX_new(TLS_client_method());
if (ctx == NULL) {
rpctls_verbose_out("rpctls_setupcl_ssl: SSL_CTX_new "
"failed\n");
return (NULL);
}
- SSL_CTX_set_ecdh_auto(ctx, 1);
if (rpctls_ciphers != NULL) {
/*
@@ -686,7 +680,11 @@ rpctls_connect(SSL_CTX *ctx, int s, char *certname, u_int certlen, X509 **certp)
return (NULL);
}
+#if OPENSSL_VERSION_NUMBER >= 0x30000000
+ cert = SSL_get1_peer_certificate(ssl);
+#else
cert = SSL_get_peer_certificate(ssl);
+#endif
if (cert == NULL) {
rpctls_verbose_out("rpctls_connect: get peer"
" certificate failed\n");