Remove the single IDEA cipher suite. There is no good reason to support

this.

ok beck@ bcook@

1 files changed, 1 insertions, 19 deletions

diff --git a/src/lib/libssl/s3_lib.c b/src/lib/libssl/s3_lib.c
index 6c4383fb22..8a7a98507a 100644
--- a/src/lib/libssl/s3_lib.c
+++ b/src/lib/libssl/s3_lib.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: s3_lib.c,v 1.110 2016/11/06 11:58:13 jsing Exp $ */
+/* $OpenBSD: s3_lib.c,v 1.111 2016/11/06 12:08:32 jsing Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -234,24 +234,6 @@ SSL_CIPHER ssl3_ciphers[] = {
                 .alg_bits = 128,
         },
 
-        /* Cipher 07 */
-#ifndef OPENSSL_NO_IDEA
-        {
-                .valid = 1,
-                .name = SSL3_TXT_RSA_IDEA_128_SHA,
-                .id = SSL3_CK_RSA_IDEA_128_SHA,
-                .algorithm_mkey = SSL_kRSA,
-                .algorithm_auth = SSL_aRSA,
-                .algorithm_enc = SSL_IDEA,
-                .algorithm_mac = SSL_SHA1,
-                .algorithm_ssl = SSL_SSLV3,
-                .algo_strength = SSL_MEDIUM,
-                .algorithm2 = SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
-                .strength_bits = 128,
-                .alg_bits = 128,
-        },
-#endif
-
         /* Cipher 09 */
         {
                 .valid = 1,