OpenSSL: Support configuration of TLSv1.3 ciphersuites

[irc/freenode/solanum.git] / librb / src / openssl_ratbox.h

diff --git a/librb/src/openssl_ratbox.h b/librb/src/openssl_ratbox.h
index 130d8096797cd2b4ab7dc2a5347e23039e0aa2f3..ecd6d3d650a92f779c0f13a571d46c808b167a10 100644 (file)
--- a/librb/src/openssl_ratbox.h
+++ b/librb/src/openssl_ratbox.h
@@ -95,6 +95,10 @@
 #  endif
 #endif
 
+#if !defined(LIBRESSL_VERSION_NUMBER) && (OPENSSL_VERSION_NUMBER >= 0x10101000L)
+#  define LRB_HAVE_TLS13                1
+#endif
+
 
 
 /*
@@ -107,6 +111,11 @@
  */
 
 static const char rb_default_ciphers[] = ""
+#ifdef LRB_HAVE_TLS13
+       "TLS_AES_256_GCM_SHA384:"
+       "TLS_CHACHA20_POLY1305_SHA256:"
+       "TLS_AES_128_GCM_SHA256:"
+#endif
        "aECDSA+kEECDH+CHACHA20:"
        "aRSA+kEECDH+CHACHA20:"
        "aRSA+kEDH+CHACHA20:"