ssl_local.h: Define SSL_OP_CISCO_ANYCONNECT if undefined in public headers

Fixes #21626

Reviewed-by: Hugo Landau <hlandau@openssl.org>
Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com>
(Merged from https://github.com/openssl/openssl/pull/21677)

diff --git a/ssl/ssl_local.h b/ssl/ssl_local.h
index 82747f6dfb477c6f8a09ab4753136f2af24d919c..d628f4026263cc78f120e77fb7490128c39f46a2 100644 (file)
--- a/ssl/ssl_local.h
+++ b/ssl/ssl_local.h
@@ -3019,6 +3019,10 @@ void ossl_ssl_set_custom_record_layer(SSL_CONNECTION *s,
      SSL_OP_SINGLE_ECDH_USE                   | \
      SSL_OP_EPHEMERAL_RSA                     )
 
+/* This option is undefined in public headers with no-dtls1-method. */
+#ifndef SSL_OP_CISCO_ANYCONNECT
+# define SSL_OP_CISCO_ANYCONNECT 0
+#endif
 /*
  * Options which are no-ops under QUIC or TLSv1.3 and which are therefore
  * allowed but ignored under QUIC.