summaryrefslogtreecommitdiffstats
path: root/lib/libssl/s3_lib.c
diff options
context:
space:
mode:
authoritojun <itojun@openbsd.org>2002-06-07 19:55:34 +0000
committeritojun <itojun@openbsd.org>2002-06-07 19:55:34 +0000
commit8edbd8abb842e2b5280cc76293e7b81b8e9610aa (patch)
treecb897a85379f8bb33fa44f24bebfdb8d1e6a66fc /lib/libssl/s3_lib.c
parentStart for support of IKECFG in SET/ACK mode. Server side only so far. (diff)
downloadwireguard-openbsd-8edbd8abb842e2b5280cc76293e7b81b8e9610aa.tar.xz
wireguard-openbsd-8edbd8abb842e2b5280cc76293e7b81b8e9610aa.zip
do not propose IDEA cipher on SSL connection. tested by beck
noticed by Sverre Froyen <sverre@viewmark.com>
Diffstat (limited to 'lib/libssl/s3_lib.c')
-rw-r--r--lib/libssl/s3_lib.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/lib/libssl/s3_lib.c b/lib/libssl/s3_lib.c
index 686992406c0..838071b16b1 100644
--- a/lib/libssl/s3_lib.c
+++ b/lib/libssl/s3_lib.c
@@ -271,6 +271,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]={
SSL_ALL_STRENGTHS,
},
/* Cipher 07 */
+#ifndef OPENSSL_NO_IDEA
{
1,
SSL3_TXT_RSA_IDEA_128_SHA,
@@ -283,6 +284,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]={
SSL_ALL_CIPHERS,
SSL_ALL_STRENGTHS,
},
+#endif
/* Cipher 08 */
{
1,