Fix setting TLS groups with BoringSSL (#11840)

* Fix setting TLS groups with BoringSSL * Get rid of #ifdef for old openssl
apache · Nov 17, 2024 · a860656 · a860656
1 parent 675b9f4
commit a860656
Showing 1 changed file with 2 additions and 7 deletions.
diff --git a/src/iocore/net/SSLUtils.cc b/src/iocore/net/SSLUtils.cc
@@ -1530,20 +1530,15 @@ SSLMultiCertConfigLoader::_set_cipher_suites([[maybe_unused]] SSL_CTX *ctx)
 }
 
 bool
-SSLMultiCertConfigLoader::_set_curves([[maybe_unused]] SSL_CTX *ctx)
+SSLMultiCertConfigLoader::_set_curves(SSL_CTX *ctx)
 {
-#if defined(SSL_CTX_set1_groups_list) || defined(SSL_CTX_set1_curves_list)
   if (this->_params->server_groups_list != nullptr) {
-#ifdef SSL_CTX_set1_groups_list
     if (!SSL_CTX_set1_groups_list(ctx, this->_params->server_groups_list)) {
-#else
-    if (!SSL_CTX_set1_curves_list(ctx, this->_params->server_groups_list)) {
-#endif
       SSLError("invalid groups list for server in %s", ts::filename::RECORDS);
       return false;
     }
   }
-#endif
+
   return true;
 }