patches pyca#5379

re-adds setters for tls-bindings
th3b0x · Dec 2, 2020 · 7d60786 · 7d60786
1 parent 1be144a
commit 7d60786
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 0 deletions.
diff --git a/src/_cffi_src/openssl/ssl.py b/src/_cffi_src/openssl/ssl.py
@@ -25,6 +25,7 @@
 static const long Cryptography_HAS_VERIFIED_CHAIN;
 static const long Cryptography_HAS_KEYLOG;
 static const long Cryptography_HAS_GET_PROTO_VERSION;
+static const long Cryptography_HAS_SET_PROTO_VERSION;
 
 /* Internally invented symbol to tell us if SSL_MODE_RELEASE_BUFFERS is
  * supported
@@ -696,4 +697,15 @@
 #else
 static const long Cryptography_HAS_GET_PROTO_VERSION = 1;
 #endif
+
+#if CRYPTOGRAPHY_OPENSSL_LESS_THAN_110 && !CRYPTOGRAPHY_IS_LIBRESSL
+static const long Cryptography_HAS_SET_PROTO_VERSION = 0;
+
+long (*SSL_CTX_set_min_proto_version)(SSL_CTX *) = NULL;
+long (*SSL_CTX_set_max_proto_version)(SSL_CTX *) = NULL;
+long (*SSL_set_min_proto_version)(SSL *) = NULL;
+long (*SSL_set_max_proto_version)(SSL *) = NULL;
+#else
+static const long Cryptography_HAS_SET_PROTO_VERSION = 1;
+#endif
 """
diff --git a/src/cryptography/hazmat/bindings/openssl/_conditional.py b/src/cryptography/hazmat/bindings/openssl/_conditional.py
@@ -271,6 +271,15 @@ def cryptography_has_get_proto_version():
     ]
 
 
+def cryptography_has_set_proto_version():
+    return [
+        "SSL_CTX_set_min_proto_version",
+        "SSL_CTX_set_max_proto_version",
+        "SSL_set_min_proto_version",
+        "SSL_set_max_proto_version",
+    ]
+
+
 # This is a mapping of
 # {condition: function-returning-names-dependent-on-that-condition} so we can
 # loop over them and delete unsupported names at runtime. It will be removed
@@ -319,4 +328,5 @@ def cryptography_has_get_proto_version():
     "Cryptography_HAS_VERIFIED_CHAIN": cryptography_has_verified_chain,
     "Cryptography_HAS_SRTP": cryptography_has_srtp,
     "Cryptography_HAS_GET_PROTO_VERSION": cryptography_has_get_proto_version,
+    "Cryptography_HAS_SET_PROTO_VERSION": cryptography_has_set_proto_version,
 }