Remove support for GOST R 34.10-94 signature authentication, along with

the two ciphersuites that use it. GOST94 public/private keys have been
long obsoleted and libcrypto does not have support for them anyway.

Discussed with Dmitry Eremin-Solenikov.

1 files changed, 1 insertions, 3 deletions

diff --git a/src/lib/libssl/s3_clnt.c b/src/lib/libssl/s3_clnt.c
index b3dbe32745..6a54dfa359 100644
--- a/src/lib/libssl/s3_clnt.c
+++ b/src/lib/libssl/s3_clnt.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: s3_clnt.c,v 1.97 2014/12/06 14:24:26 jsing Exp $ */
+/* $OpenBSD: s3_clnt.c,v 1.98 2014/12/10 15:36:46 jsing Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -2207,8 +2207,6 @@ ssl3_send_client_key_exchange(SSL *s)
 
                         /* Get server sertificate PKEY and create ctx from it */
                         peer_cert = s->session->sess_cert->peer_pkeys[SSL_PKEY_GOST01].x509;
-                        if (!peer_cert)
-                                peer_cert = s->session->sess_cert->peer_pkeys[SSL_PKEY_GOST94].x509;
                         if (!peer_cert) {
                                 SSLerr(SSL_F_SSL3_SEND_CLIENT_KEY_EXCHANGE,
                                     SSL_R_NO_GOST_CERTIFICATE_SENT_BY_PEER);