diff options
| author |   tedu <tedu@openbsd.org> | 2014-05-05 15:03:22 +0000 |
|---|---|---|
| committer | tedu <tedu@openbsd.org> | 2014-05-05 15:03:22 +0000 |
| commit | 8a8f3f13dd1fd3d25edeb39c5f7566180cd105f8 (patch) | |
| tree | bcf94eb93f2a60e72350cf5ac63be771a19d7b94 /lib/libssl/ssl_ciph.c | |
| parent | A couple of malloc()+memset(0) -> calloc. (diff) | |
| download | wireguard-openbsd-8a8f3f13dd1fd3d25edeb39c5f7566180cd105f8.tar.xz wireguard-openbsd-8a8f3f13dd1fd3d25edeb39c5f7566180cd105f8.zip | |
Remove SRP and Kerberos support from libssl. These are complex protocols
all on their own and we can't effectively maintain them without using them,
which we don't. If the need arises, the code can be resurrected.
Diffstat (limited to 'lib/libssl/ssl_ciph.c')
| -rw-r--r-- | lib/libssl/ssl_ciph.c | 4 |
1 files changed, 0 insertions, 4 deletions
diff --git a/lib/libssl/ssl_ciph.c b/lib/libssl/ssl_ciph.c index 00ab752de1a..a1523524a1e 100644 --- a/lib/libssl/ssl_ciph.c +++ b/lib/libssl/ssl_ciph.c @@ -702,10 +702,8 @@ ssl_cipher_get_disabled(unsigned long *mkey, unsigned long *auth, unsigned long *mkey |= SSL_kDHr|SSL_kDHd|SSL_kEDH; *auth |= SSL_aDH; #endif -#ifdef OPENSSL_NO_KRB5 *mkey |= SSL_kKRB5; *auth |= SSL_aKRB5; -#endif #ifdef OPENSSL_NO_ECDSA *auth |= SSL_aECDSA; #endif @@ -717,9 +715,7 @@ ssl_cipher_get_disabled(unsigned long *mkey, unsigned long *auth, unsigned long *mkey |= SSL_kPSK; *auth |= SSL_aPSK; #endif -#ifdef OPENSSL_NO_SRP *mkey |= SSL_kSRP; -#endif /* Check for presence of GOST 34.10 algorithms, and if they * do not present, disable appropriate auth and key exchange */ if (!get_optional_pkey_id("gost94")) { |