diff options
| author | doug <> | 2015-07-17 16:10:49 +0000 |
|---|---|---|
| committer | doug <> | 2015-07-17 16:10:49 +0000 |
| commit | 88c4e57f35fca63b679c280f8278bac11c55356d (patch) | |
| tree | 001d31fad9a57f8edd3139432b7f7748d7d191cd | |
| parent | 9ca6932d982386fe5ebbdac20fae04450fa98dae (diff) | |
| download | openbsd-88c4e57f35fca63b679c280f8278bac11c55356d.tar.gz openbsd-88c4e57f35fca63b679c280f8278bac11c55356d.tar.bz2 openbsd-88c4e57f35fca63b679c280f8278bac11c55356d.zip | |
Remove SSLv3 support from openssl(1) s_time.
ok miod@ bcook@ beck@
| -rw-r--r-- | src/usr.bin/openssl/s_time.c | 16 |
1 files changed, 3 insertions, 13 deletions
diff --git a/src/usr.bin/openssl/s_time.c b/src/usr.bin/openssl/s_time.c index e49c741dee..6784bae8e9 100644 --- a/src/usr.bin/openssl/s_time.c +++ b/src/usr.bin/openssl/s_time.c | |||
| @@ -1,4 +1,4 @@ | |||
| 1 | /* $OpenBSD: s_time.c,v 1.7 2015/04/15 16:33:49 jsing Exp $ */ | 1 | /* $OpenBSD: s_time.c,v 1.8 2015/07/17 16:10:49 doug Exp $ */ |
| 2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) | 2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) |
| 3 | * All rights reserved. | 3 | * All rights reserved. |
| 4 | * | 4 | * |
| @@ -115,7 +115,6 @@ struct { | |||
| 115 | int maxtime; | 115 | int maxtime; |
| 116 | int nbio; | 116 | int nbio; |
| 117 | int perform; | 117 | int perform; |
| 118 | int ssl3; | ||
| 119 | int verify; | 118 | int verify; |
| 120 | int verify_depth; | 119 | int verify_depth; |
| 121 | char *www_path; | 120 | char *www_path; |
| @@ -192,12 +191,6 @@ struct option s_time_options[] = { | |||
| 192 | .value = 2, | 191 | .value = 2, |
| 193 | }, | 192 | }, |
| 194 | { | 193 | { |
| 195 | .name = "ssl3", | ||
| 196 | .desc = "Only use SSLv3", | ||
| 197 | .type = OPTION_FLAG, | ||
| 198 | .opt.flag = &s_time_config.ssl3, | ||
| 199 | }, | ||
| 200 | { | ||
| 201 | .name = "time", | 194 | .name = "time", |
| 202 | .argname = "seconds", | 195 | .argname = "seconds", |
| 203 | .desc = "Duration to perform timing tests for (default 30)", | 196 | .desc = "Duration to perform timing tests for (default 30)", |
| @@ -228,7 +221,7 @@ s_time_usage(void) | |||
| 228 | "usage: s_time " | 221 | "usage: s_time " |
| 229 | "[-bugs] [-CAfile file] [-CApath directory] [-cert file]\n" | 222 | "[-bugs] [-CAfile file] [-CApath directory] [-cert file]\n" |
| 230 | " [-cipher cipherlist] [-connect host:port] [-key keyfile]\n" | 223 | " [-cipher cipherlist] [-connect host:port] [-key keyfile]\n" |
| 231 | " [-nbio] [-new] [-reuse] [-ssl3] [-time seconds]\n" | 224 | " [-nbio] [-new] [-reuse] [-time seconds]\n" |
| 232 | " [-verify depth] [-www page]\n\n"); | 225 | " [-verify depth] [-www page]\n\n"); |
| 233 | options_usage(s_time_options); | 226 | options_usage(s_time_options); |
| 234 | } | 227 | } |
| @@ -261,7 +254,7 @@ s_time_main(int argc, char **argv) | |||
| 261 | int ret = 1, i; | 254 | int ret = 1, i; |
| 262 | char buf[1024 * 8]; | 255 | char buf[1024 * 8]; |
| 263 | int ver; | 256 | int ver; |
| 264 | 257 | ||
| 265 | s_time_meth = SSLv23_client_method(); | 258 | s_time_meth = SSLv23_client_method(); |
| 266 | 259 | ||
| 267 | verify_depth = 0; | 260 | verify_depth = 0; |
| @@ -280,9 +273,6 @@ s_time_main(int argc, char **argv) | |||
| 280 | goto end; | 273 | goto end; |
| 281 | } | 274 | } |
| 282 | 275 | ||
| 283 | if (s_time_config.ssl3) | ||
| 284 | s_time_meth = SSLv3_client_method(); | ||
| 285 | |||
| 286 | if (s_time_config.verify_depth >= 0) { | 276 | if (s_time_config.verify_depth >= 0) { |
| 287 | s_time_config.verify = SSL_VERIFY_PEER | SSL_VERIFY_CLIENT_ONCE; | 277 | s_time_config.verify = SSL_VERIFY_PEER | SSL_VERIFY_CLIENT_ONCE; |
| 288 | verify_depth = s_time_config.verify_depth; | 278 | verify_depth = s_time_config.verify_depth; |
