Don't access SSL internals in bssl_shim.

This is the last blocker within BoringSSL itself to opaquifying SSL.
(There are still blockers in consumers, of course.)

BUG=6

Change-Id: Ie3b8dcb78eeaa9aea7311406c5431a8625d60401
Reviewed-on: https://boringssl-review.googlesource.com/12061
Reviewed-by: Adam Langley <agl@google.com>
This commit is contained in:
David Benjamin 2016-11-02 17:18:13 -04:00 committed by Adam Langley
parent abbbee10ad
commit 9ec3798236

View File

@ -366,7 +366,7 @@ static bool GetCertificate(SSL *ssl, bssl::UniquePtr<X509> *out_x509,
} }
} }
if (!config->ocsp_response.empty() && if (!config->ocsp_response.empty() &&
!SSL_CTX_set_ocsp_response(ssl->ctx, !SSL_CTX_set_ocsp_response(SSL_get_SSL_CTX(ssl),
(const uint8_t *)config->ocsp_response.data(), (const uint8_t *)config->ocsp_response.data(),
config->ocsp_response.size())) { config->ocsp_response.size())) {
return false; return false;