From: tb <tb@openbsd.org>
Date: Wed, 8 Sep 2021 17:24:23 +0000 (+0000)
Subject: Prepare to provide API stubs for PHA
X-Git-Url: http://artulab.com/gitweb/?a=commitdiff_plain;h=45aea4dca19816f083b6b66a16e3ede00ab4d8a1;p=openbsd

Prepare to provide API stubs for PHA

ok bcook jsing
---

diff --git a/lib/libssl/ssl.h b/lib/libssl/ssl.h
index b2a576bf557..4117d90e89a 100644
--- a/lib/libssl/ssl.h
+++ b/lib/libssl/ssl.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssl.h,v 1.198 2021/09/08 12:56:14 tb Exp $ */
+/* $OpenBSD: ssl.h,v 1.199 2021/09/08 17:24:23 tb Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -853,6 +853,13 @@ size_t SSL_get_peer_finished(const SSL *s, void *buf, size_t count);
 #define SSL_VERIFY_PEER			0x01
 #define SSL_VERIFY_FAIL_IF_NO_PEER_CERT	0x02
 #define SSL_VERIFY_CLIENT_ONCE		0x04
+#if defined(LIBRESSL_HAS_TLS1_3) || defined(LIBRESSL_INTERNAL)
+#define SSL_VERIFY_POST_HANDSHAKE	0x08
+
+int SSL_verify_client_post_handshake(SSL *s);
+void SSL_CTX_set_post_handshake_auth(SSL_CTX *ctx, int val);
+void SSL_set_post_handshake_auth(SSL *s, int val);
+#endif
 
 #define OpenSSL_add_ssl_algorithms()	SSL_library_init()
 #define SSLeay_add_ssl_algorithms()	SSL_library_init()
diff --git a/lib/libssl/ssl_lib.c b/lib/libssl/ssl_lib.c
index ef2a92ffe35..d53bb66b57e 100644
--- a/lib/libssl/ssl_lib.c
+++ b/lib/libssl/ssl_lib.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssl_lib.c,v 1.265 2021/09/08 12:32:07 tb Exp $ */
+/* $OpenBSD: ssl_lib.c,v 1.266 2021/09/08 17:24:23 tb Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -2966,6 +2966,24 @@ SSL_get_verify_result(const SSL *ssl)
 	return (ssl->verify_result);
 }
 
+int
+SSL_verify_client_post_handshake(SSL *ssl)
+{
+	return 0;
+}
+
+void
+SSL_CTX_set_post_handshake_auth(SSL_CTX *ctx, int val)
+{
+	return;
+}
+
+void
+SSL_set_post_handshake_auth(SSL *ssl, int val)
+{
+	return;
+}
+
 int
 SSL_get_ex_new_index(long argl, void *argp, CRYPTO_EX_new *new_func,
     CRYPTO_EX_dup *dup_func, CRYPTO_EX_free *free_func)