summaryrefslogtreecommitdiffstats
path: root/lib/libssl/s3_lib.c
diff options
context:
space:
mode:
authorjsing <jsing@openbsd.org>2017-08-12 02:55:22 +0000
committerjsing <jsing@openbsd.org>2017-08-12 02:55:22 +0000
commit4722f98804ba189e411b7860ab9786cb0b63c135 (patch)
treec76f96056a58733d1e2e168f3bcc0ca9f3de85f2 /lib/libssl/s3_lib.c
parentClear the child pointer in CBB_cleanup(), so that we have fewer pointers (diff)
downloadwireguard-openbsd-4722f98804ba189e411b7860ab9786cb0b63c135.tar.xz
wireguard-openbsd-4722f98804ba189e411b7860ab9786cb0b63c135.zip
Remove support for DSS/DSA, since we removed the cipher suites a while
back. ok guenther@
Diffstat (limited to 'lib/libssl/s3_lib.c')
-rw-r--r--lib/libssl/s3_lib.c6
1 files changed, 1 insertions, 5 deletions
diff --git a/lib/libssl/s3_lib.c b/lib/libssl/s3_lib.c
index ad627d10d81..3a11d628930 100644
--- a/lib/libssl/s3_lib.c
+++ b/lib/libssl/s3_lib.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: s3_lib.c,v 1.156 2017/08/11 17:54:41 jsing Exp $ */
+/* $OpenBSD: s3_lib.c,v 1.157 2017/08/12 02:55:22 jsing Exp $ */
/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
* All rights reserved.
*
@@ -2460,14 +2460,10 @@ ssl3_get_req_cert_types(SSL *s, CBB *cbb)
if ((alg_k & SSL_kDHE) != 0) {
if (!CBB_add_u8(cbb, SSL3_CT_RSA_FIXED_DH))
return 0;
- if (!CBB_add_u8(cbb, SSL3_CT_DSS_FIXED_DH))
- return 0;
}
if (!CBB_add_u8(cbb, SSL3_CT_RSA_SIGN))
return 0;
- if (!CBB_add_u8(cbb, SSL3_CT_DSS_SIGN))
- return 0;
/*
* ECDSA certs can be used with RSA cipher suites as well