diff options
| author |   jsing <jsing@openbsd.org> | 2017-08-12 02:55:22 +0000 |
|---|---|---|
| committer | jsing <jsing@openbsd.org> | 2017-08-12 02:55:22 +0000 |
| commit | 4722f98804ba189e411b7860ab9786cb0b63c135 (patch) | |
| tree | c76f96056a58733d1e2e168f3bcc0ca9f3de85f2 /lib/libssl/ssl_srvr.c | |
| parent | Clear the child pointer in CBB_cleanup(), so that we have fewer pointers (diff) | |
| download | wireguard-openbsd-4722f98804ba189e411b7860ab9786cb0b63c135.tar.xz wireguard-openbsd-4722f98804ba189e411b7860ab9786cb0b63c135.zip | |
Remove support for DSS/DSA, since we removed the cipher suites a while
back.
ok guenther@
Diffstat (limited to 'lib/libssl/ssl_srvr.c')
| -rw-r--r-- | lib/libssl/ssl_srvr.c | 13 |
1 files changed, 1 insertions, 12 deletions
diff --git a/lib/libssl/ssl_srvr.c b/lib/libssl/ssl_srvr.c index e370b7571cd..a21039e7278 100644 --- a/lib/libssl/ssl_srvr.c +++ b/lib/libssl/ssl_srvr.c @@ -1,4 +1,4 @@ -/* $OpenBSD: ssl_srvr.c,v 1.19 2017/08/11 17:54:41 jsing Exp $ */ +/* $OpenBSD: ssl_srvr.c,v 1.20 2017/08/12 02:55:22 jsing Exp $ */ /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) * All rights reserved. * @@ -2256,17 +2256,6 @@ ssl3_get_cert_verify(SSL *s) goto f_err; } } else - if (pkey->type == EVP_PKEY_DSA) { - j = DSA_verify(pkey->save_type, - &(S3I(s)->tmp.cert_verify_md[MD5_DIGEST_LENGTH]), - SHA_DIGEST_LENGTH, p, i, pkey->pkey.dsa); - if (j <= 0) { - /* bad signature */ - al = SSL_AD_DECRYPT_ERROR; - SSLerror(s, SSL_R_BAD_DSA_SIGNATURE); - goto f_err; - } - } else if (pkey->type == EVP_PKEY_EC) { j = ECDSA_verify(pkey->save_type, &(S3I(s)->tmp.cert_verify_md[MD5_DIGEST_LENGTH]), |