summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authordoug <>2015-07-17 16:10:49 +0000
committerdoug <>2015-07-17 16:10:49 +0000
commit948a099f38f94b5e49f26b25636f12309d2d2d71 (patch)
tree001d31fad9a57f8edd3139432b7f7748d7d191cd
parent380ea99a8c0670ce466a92e71fc806a3f7aab7c2 (diff)
downloadopenbsd-948a099f38f94b5e49f26b25636f12309d2d2d71.tar.gz
openbsd-948a099f38f94b5e49f26b25636f12309d2d2d71.tar.bz2
openbsd-948a099f38f94b5e49f26b25636f12309d2d2d71.zip
Remove SSLv3 support from openssl(1) s_time.
ok miod@ bcook@ beck@
-rw-r--r--src/usr.bin/openssl/s_time.c16
1 files changed, 3 insertions, 13 deletions
diff --git a/src/usr.bin/openssl/s_time.c b/src/usr.bin/openssl/s_time.c
index e49c741dee..6784bae8e9 100644
--- a/src/usr.bin/openssl/s_time.c
+++ b/src/usr.bin/openssl/s_time.c
@@ -1,4 +1,4 @@
1/* $OpenBSD: s_time.c,v 1.7 2015/04/15 16:33:49 jsing Exp $ */ 1/* $OpenBSD: s_time.c,v 1.8 2015/07/17 16:10:49 doug Exp $ */
2/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) 2/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3 * All rights reserved. 3 * All rights reserved.
4 * 4 *
@@ -115,7 +115,6 @@ struct {
115 int maxtime; 115 int maxtime;
116 int nbio; 116 int nbio;
117 int perform; 117 int perform;
118 int ssl3;
119 int verify; 118 int verify;
120 int verify_depth; 119 int verify_depth;
121 char *www_path; 120 char *www_path;
@@ -192,12 +191,6 @@ struct option s_time_options[] = {
192 .value = 2, 191 .value = 2,
193 }, 192 },
194 { 193 {
195 .name = "ssl3",
196 .desc = "Only use SSLv3",
197 .type = OPTION_FLAG,
198 .opt.flag = &s_time_config.ssl3,
199 },
200 {
201 .name = "time", 194 .name = "time",
202 .argname = "seconds", 195 .argname = "seconds",
203 .desc = "Duration to perform timing tests for (default 30)", 196 .desc = "Duration to perform timing tests for (default 30)",
@@ -228,7 +221,7 @@ s_time_usage(void)
228 "usage: s_time " 221 "usage: s_time "
229 "[-bugs] [-CAfile file] [-CApath directory] [-cert file]\n" 222 "[-bugs] [-CAfile file] [-CApath directory] [-cert file]\n"
230 " [-cipher cipherlist] [-connect host:port] [-key keyfile]\n" 223 " [-cipher cipherlist] [-connect host:port] [-key keyfile]\n"
231 " [-nbio] [-new] [-reuse] [-ssl3] [-time seconds]\n" 224 " [-nbio] [-new] [-reuse] [-time seconds]\n"
232 " [-verify depth] [-www page]\n\n"); 225 " [-verify depth] [-www page]\n\n");
233 options_usage(s_time_options); 226 options_usage(s_time_options);
234} 227}
@@ -261,7 +254,7 @@ s_time_main(int argc, char **argv)
261 int ret = 1, i; 254 int ret = 1, i;
262 char buf[1024 * 8]; 255 char buf[1024 * 8];
263 int ver; 256 int ver;
264 257
265 s_time_meth = SSLv23_client_method(); 258 s_time_meth = SSLv23_client_method();
266 259
267 verify_depth = 0; 260 verify_depth = 0;
@@ -280,9 +273,6 @@ s_time_main(int argc, char **argv)
280 goto end; 273 goto end;
281 } 274 }
282 275
283 if (s_time_config.ssl3)
284 s_time_meth = SSLv3_client_method();
285
286 if (s_time_config.verify_depth >= 0) { 276 if (s_time_config.verify_depth >= 0) {
287 s_time_config.verify = SSL_VERIFY_PEER | SSL_VERIFY_CLIENT_ONCE; 277 s_time_config.verify = SSL_VERIFY_PEER | SSL_VERIFY_CLIENT_ONCE;
288 verify_depth = s_time_config.verify_depth; 278 verify_depth = s_time_config.verify_depth;