From a7bdd0433c0360fccb4dd9f5c43c6fabc4e8c659 Mon Sep 17 00:00:00 2001
From: John Baldwin <jhb@FreeBSD.org>
Date: Thu, 31 Oct 2019 16:51:08 -0700
Subject: [PATCH] Support ciphersuites using a SHA2 384 digest in FreeBSD KTLS.

Reviewed-by: Kurt Roeckx <kurt@roeckx.be>
Reviewed-by: Richard Levitte <levitte@openssl.org>
GH: #10372
---
 ssl/t1_enc.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/ssl/t1_enc.c b/ssl/t1_enc.c
index 09bfb45884..19045f9649 100644
--- a/ssl/t1_enc.c
+++ b/ssl/t1_enc.c
@@ -410,6 +410,9 @@ int tls1_change_cipher_state(SSL *s, int which)
         case SSL_SHA256:
             crypto_info.auth_algorithm = CRYPTO_SHA2_256_HMAC;
             break;
+        case SSL_SHA384:
+            crypto_info.auth_algorithm = CRYPTO_SHA2_384_HMAC;
+            break;
         default:
             goto skip_ktls;
         }
-- 
2.25.1