diff options
| author |   tedu <tedu@openbsd.org> | 2014-04-29 14:10:07 +0000 |
|---|---|---|
| committer | tedu <tedu@openbsd.org> | 2014-04-29 14:10:07 +0000 |
| commit | 1c71c09da8990c2356151ab51cc3607d9e9089ff (patch) | |
| tree | e47e7ffb05a4118e6ae0a1396a1bf5811ff86d0a | |
| parent | regen (diff) | |
| download | wireguard-openbsd-1c71c09da8990c2356151ab51cc3607d9e9089ff.tar.xz wireguard-openbsd-1c71c09da8990c2356151ab51cc3607d9e9089ff.zip | |
nginx dudes unrolled SSL_OP_ALL by hand so we also have to delete
SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS from here to benefit. ok miod
| -rw-r--r-- | usr.sbin/nginx/src/event/ngx_event_openssl.c | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/usr.sbin/nginx/src/event/ngx_event_openssl.c b/usr.sbin/nginx/src/event/ngx_event_openssl.c index 915e604bbbc..81a1e42d81c 100644 --- a/usr.sbin/nginx/src/event/ngx_event_openssl.c +++ b/usr.sbin/nginx/src/event/ngx_event_openssl.c @@ -192,8 +192,6 @@ ngx_ssl_create(ngx_ssl_t *ssl, ngx_uint_t protocols, void *data) SSL_CTX_set_options(ssl->ctx, SSL_OP_TLS_D5_BUG); SSL_CTX_set_options(ssl->ctx, SSL_OP_TLS_BLOCK_PADDING_BUG); - SSL_CTX_set_options(ssl->ctx, SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS); - SSL_CTX_set_options(ssl->ctx, SSL_OP_SINGLE_DH_USE); if (!(protocols & NGX_SSL_SSLv2)) { |