diff options
author | 2014-12-10 15:36:46 +0000 | |
---|---|---|
committer | 2014-12-10 15:36:46 +0000 | |
commit | 829c9983835882d17ba9edba19f49ebc0fc4186e (patch) | |
tree | 7ad8709f781116a7a6fb21045e30a4ed14a61b95 /lib/libssl/src/ssl/s3_both.c | |
parent | retire shutdown hooks; ok deraadt, krw (diff) | |
download | wireguard-openbsd-829c9983835882d17ba9edba19f49ebc0fc4186e.tar.xz wireguard-openbsd-829c9983835882d17ba9edba19f49ebc0fc4186e.zip |
Remove support for GOST R 34.10-94 signature authentication, along with
the two ciphersuites that use it. GOST94 public/private keys have been
long obsoleted and libcrypto does not have support for them anyway.
Discussed with Dmitry Eremin-Solenikov.
Diffstat (limited to 'lib/libssl/src/ssl/s3_both.c')
-rw-r--r-- | lib/libssl/src/ssl/s3_both.c | 5 |
1 files changed, 1 insertions, 4 deletions
diff --git a/lib/libssl/src/ssl/s3_both.c b/lib/libssl/src/ssl/s3_both.c index 752bac6c946..0d9cc3d65ca 100644 --- a/lib/libssl/src/ssl/s3_both.c +++ b/lib/libssl/src/ssl/s3_both.c @@ -1,4 +1,4 @@ -/* $OpenBSD: s3_both.c,v 1.32 2014/11/16 14:12:47 jsing Exp $ */ +/* $OpenBSD: s3_both.c,v 1.33 2014/12/10 15:36:46 jsing Exp $ */ /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) * All rights reserved. * @@ -542,9 +542,6 @@ ssl_cert_type(X509 *x, EVP_PKEY *pkey) } else if (i == EVP_PKEY_EC) { ret = SSL_PKEY_ECC; - } - else if (i == NID_id_GostR3410_94 || i == NID_id_GostR3410_94_cc) { - ret = SSL_PKEY_GOST94; } else if (i == NID_id_GostR3410_2001 || i == NID_id_GostR3410_2001_cc) { ret = SSL_PKEY_GOST01; } |