summaryrefslogtreecommitdiffstats
path: root/lib/libssl/src/ssl/s2_lib.c
diff options
context:
space:
mode:
authoritojun <itojun@openbsd.org>2002-06-07 19:55:34 +0000
committeritojun <itojun@openbsd.org>2002-06-07 19:55:34 +0000
commit8edbd8abb842e2b5280cc76293e7b81b8e9610aa (patch)
treecb897a85379f8bb33fa44f24bebfdb8d1e6a66fc /lib/libssl/src/ssl/s2_lib.c
parentStart for support of IKECFG in SET/ACK mode. Server side only so far. (diff)
downloadwireguard-openbsd-8edbd8abb842e2b5280cc76293e7b81b8e9610aa.tar.xz
wireguard-openbsd-8edbd8abb842e2b5280cc76293e7b81b8e9610aa.zip
do not propose IDEA cipher on SSL connection. tested by beck
noticed by Sverre Froyen <sverre@viewmark.com>
Diffstat (limited to 'lib/libssl/src/ssl/s2_lib.c')
-rw-r--r--lib/libssl/src/ssl/s2_lib.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/lib/libssl/src/ssl/s2_lib.c b/lib/libssl/src/ssl/s2_lib.c
index bce2b4e83f2..eb315bcf07a 100644
--- a/lib/libssl/src/ssl/s2_lib.c
+++ b/lib/libssl/src/ssl/s2_lib.c
@@ -137,6 +137,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl2_ciphers[]={
SSL_ALL_STRENGTHS,
},
/* IDEA_128_CBC_WITH_MD5 */
+#ifndef OPENSSL_NO_IDEA
{
1,
SSL2_TXT_IDEA_128_CBC_WITH_MD5,
@@ -149,6 +150,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl2_ciphers[]={
SSL_ALL_CIPHERS,
SSL_ALL_STRENGTHS,
},
+#endif
/* DES_64_CBC_WITH_MD5 */
{
1,