diff --git a/src/tls_openssl.c b/src/tls_openssl.c index 34398af..b91d689 100644 --- a/src/tls_openssl.c +++ b/src/tls_openssl.c @@ -81,13 +81,19 @@ const char *tls_errors[] = { TLS_ERROR_FIELD(SSL_ERROR_ZERO_RETURN), TLS_ERROR_FIELD(SSL_ERROR_WANT_CONNECT), TLS_ERROR_FIELD(SSL_ERROR_WANT_ACCEPT), +#if OPENSSL_VERSION_NUMBER >= 0x10100000L TLS_ERROR_FIELD(SSL_ERROR_WANT_ASYNC), TLS_ERROR_FIELD(SSL_ERROR_WANT_ASYNC_JOB), +#endif +#if OPENSSL_VERSION_NUMBER >= 0x10101000L TLS_ERROR_FIELD(SSL_ERROR_WANT_CLIENT_HELLO_CB), +#endif }; const char *cert_errors[] = { TLS_ERROR_FIELD(X509_V_OK), +#if OPENSSL_VERSION_NUMBER >= 0x10002000L TLS_ERROR_FIELD(X509_V_ERR_UNSPECIFIED), +#endif TLS_ERROR_FIELD(X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT), TLS_ERROR_FIELD(X509_V_ERR_UNABLE_TO_GET_CRL), TLS_ERROR_FIELD(X509_V_ERR_UNABLE_TO_DECRYPT_CERT_SIGNATURE), @@ -130,18 +136,18 @@ const char *cert_errors[] = { TLS_ERROR_FIELD(X509_V_ERR_INVALID_EXTENSION), TLS_ERROR_FIELD(X509_V_ERR_INVALID_POLICY_EXTENSION), TLS_ERROR_FIELD(X509_V_ERR_NO_EXPLICIT_POLICY), + TLS_ERROR_FIELD(X509_V_ERR_APPLICATION_VERIFICATION), +#if OPENSSL_VERSION_NUMBER >= 0x10002000L TLS_ERROR_FIELD(X509_V_ERR_DIFFERENT_CRL_SCOPE), TLS_ERROR_FIELD(X509_V_ERR_UNSUPPORTED_EXTENSION_FEATURE), TLS_ERROR_FIELD(X509_V_ERR_UNNESTED_RESOURCE), TLS_ERROR_FIELD(X509_V_ERR_PERMITTED_VIOLATION), TLS_ERROR_FIELD(X509_V_ERR_EXCLUDED_VIOLATION), TLS_ERROR_FIELD(X509_V_ERR_SUBTREE_MINMAX), - TLS_ERROR_FIELD(X509_V_ERR_APPLICATION_VERIFICATION), TLS_ERROR_FIELD(X509_V_ERR_UNSUPPORTED_CONSTRAINT_TYPE), TLS_ERROR_FIELD(X509_V_ERR_UNSUPPORTED_CONSTRAINT_SYNTAX), TLS_ERROR_FIELD(X509_V_ERR_UNSUPPORTED_NAME_SYNTAX), TLS_ERROR_FIELD(X509_V_ERR_CRL_PATH_VALIDATION_ERROR), - TLS_ERROR_FIELD(X509_V_ERR_PATH_LOOP), TLS_ERROR_FIELD(X509_V_ERR_SUITE_B_INVALID_VERSION), TLS_ERROR_FIELD(X509_V_ERR_SUITE_B_INVALID_ALGORITHM), TLS_ERROR_FIELD(X509_V_ERR_SUITE_B_INVALID_CURVE), @@ -151,6 +157,9 @@ const char *cert_errors[] = { TLS_ERROR_FIELD(X509_V_ERR_HOSTNAME_MISMATCH), TLS_ERROR_FIELD(X509_V_ERR_EMAIL_MISMATCH), TLS_ERROR_FIELD(X509_V_ERR_IP_ADDRESS_MISMATCH), +#endif +#if OPENSSL_VERSION_NUMBER >= 0x10100000L + TLS_ERROR_FIELD(X509_V_ERR_PATH_LOOP), TLS_ERROR_FIELD(X509_V_ERR_DANE_NO_MATCH), TLS_ERROR_FIELD(X509_V_ERR_EE_KEY_TOO_SMALL), TLS_ERROR_FIELD(X509_V_ERR_CA_KEY_TOO_SMALL), @@ -162,6 +171,7 @@ const char *cert_errors[] = { TLS_ERROR_FIELD(X509_V_ERR_OCSP_VERIFY_NEEDED), TLS_ERROR_FIELD(X509_V_ERR_OCSP_VERIFY_FAILED), TLS_ERROR_FIELD(X509_V_ERR_OCSP_CERT_UNKNOWN), +#endif }; #undef TLS_ERROR_FIELD