diff options
author | doug <> | 2015-07-17 16:10:49 +0000 |
---|---|---|
committer | doug <> | 2015-07-17 16:10:49 +0000 |
commit | 948a099f38f94b5e49f26b25636f12309d2d2d71 (patch) | |
tree | 001d31fad9a57f8edd3139432b7f7748d7d191cd | |
parent | 380ea99a8c0670ce466a92e71fc806a3f7aab7c2 (diff) | |
download | openbsd-948a099f38f94b5e49f26b25636f12309d2d2d71.tar.gz openbsd-948a099f38f94b5e49f26b25636f12309d2d2d71.tar.bz2 openbsd-948a099f38f94b5e49f26b25636f12309d2d2d71.zip |
Remove SSLv3 support from openssl(1) s_time.
ok miod@ bcook@ beck@
-rw-r--r-- | src/usr.bin/openssl/s_time.c | 16 |
1 files changed, 3 insertions, 13 deletions
diff --git a/src/usr.bin/openssl/s_time.c b/src/usr.bin/openssl/s_time.c index e49c741dee..6784bae8e9 100644 --- a/src/usr.bin/openssl/s_time.c +++ b/src/usr.bin/openssl/s_time.c | |||
@@ -1,4 +1,4 @@ | |||
1 | /* $OpenBSD: s_time.c,v 1.7 2015/04/15 16:33:49 jsing Exp $ */ | 1 | /* $OpenBSD: s_time.c,v 1.8 2015/07/17 16:10:49 doug Exp $ */ |
2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) | 2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) |
3 | * All rights reserved. | 3 | * All rights reserved. |
4 | * | 4 | * |
@@ -115,7 +115,6 @@ struct { | |||
115 | int maxtime; | 115 | int maxtime; |
116 | int nbio; | 116 | int nbio; |
117 | int perform; | 117 | int perform; |
118 | int ssl3; | ||
119 | int verify; | 118 | int verify; |
120 | int verify_depth; | 119 | int verify_depth; |
121 | char *www_path; | 120 | char *www_path; |
@@ -192,12 +191,6 @@ struct option s_time_options[] = { | |||
192 | .value = 2, | 191 | .value = 2, |
193 | }, | 192 | }, |
194 | { | 193 | { |
195 | .name = "ssl3", | ||
196 | .desc = "Only use SSLv3", | ||
197 | .type = OPTION_FLAG, | ||
198 | .opt.flag = &s_time_config.ssl3, | ||
199 | }, | ||
200 | { | ||
201 | .name = "time", | 194 | .name = "time", |
202 | .argname = "seconds", | 195 | .argname = "seconds", |
203 | .desc = "Duration to perform timing tests for (default 30)", | 196 | .desc = "Duration to perform timing tests for (default 30)", |
@@ -228,7 +221,7 @@ s_time_usage(void) | |||
228 | "usage: s_time " | 221 | "usage: s_time " |
229 | "[-bugs] [-CAfile file] [-CApath directory] [-cert file]\n" | 222 | "[-bugs] [-CAfile file] [-CApath directory] [-cert file]\n" |
230 | " [-cipher cipherlist] [-connect host:port] [-key keyfile]\n" | 223 | " [-cipher cipherlist] [-connect host:port] [-key keyfile]\n" |
231 | " [-nbio] [-new] [-reuse] [-ssl3] [-time seconds]\n" | 224 | " [-nbio] [-new] [-reuse] [-time seconds]\n" |
232 | " [-verify depth] [-www page]\n\n"); | 225 | " [-verify depth] [-www page]\n\n"); |
233 | options_usage(s_time_options); | 226 | options_usage(s_time_options); |
234 | } | 227 | } |
@@ -261,7 +254,7 @@ s_time_main(int argc, char **argv) | |||
261 | int ret = 1, i; | 254 | int ret = 1, i; |
262 | char buf[1024 * 8]; | 255 | char buf[1024 * 8]; |
263 | int ver; | 256 | int ver; |
264 | 257 | ||
265 | s_time_meth = SSLv23_client_method(); | 258 | s_time_meth = SSLv23_client_method(); |
266 | 259 | ||
267 | verify_depth = 0; | 260 | verify_depth = 0; |
@@ -280,9 +273,6 @@ s_time_main(int argc, char **argv) | |||
280 | goto end; | 273 | goto end; |
281 | } | 274 | } |
282 | 275 | ||
283 | if (s_time_config.ssl3) | ||
284 | s_time_meth = SSLv3_client_method(); | ||
285 | |||
286 | if (s_time_config.verify_depth >= 0) { | 276 | if (s_time_config.verify_depth >= 0) { |
287 | s_time_config.verify = SSL_VERIFY_PEER | SSL_VERIFY_CLIENT_ONCE; | 277 | s_time_config.verify = SSL_VERIFY_PEER | SSL_VERIFY_CLIENT_ONCE; |
288 | verify_depth = s_time_config.verify_depth; | 278 | verify_depth = s_time_config.verify_depth; |