Disable TLS support...

Just kidding!

unifdef OPENSSL_NO_TLS since we will never want to actually do that.

ok deraadt@

1 files changed, 0 insertions, 4 deletions

diff --git a/src/lib/libssl/s23_clnt.c b/src/lib/libssl/s23_clnt.c
index 1bc582364b..7a42b1f0ea 100644
--- a/src/lib/libssl/s23_clnt.c
+++ b/src/lib/libssl/s23_clnt.c
@@ -309,14 +309,10 @@ ssl23_client_hello(SSL *s)
          * answer is SSL_OP_NO_TLSv1|SSL_OP_NO_SSLv3|SSL_OP_NO_SSLv2.
          */
         mask = SSL_OP_NO_TLSv1_1|SSL_OP_NO_TLSv1|SSL_OP_NO_SSLv3;
-#if !defined(OPENSSL_NO_TLS1_2_CLIENT)
         version = TLS1_2_VERSION;
 
         if ((options & SSL_OP_NO_TLSv1_2) && (options & mask) != mask)
                 version = TLS1_1_VERSION;
-#else
-        version = TLS1_1_VERSION;
-#endif
         mask &= ~SSL_OP_NO_TLSv1_1;
         if ((options & SSL_OP_NO_TLSv1_1) && (options & mask) != mask)
                 version = TLS1_VERSION;