diff options
author | miod <> | 2014-04-23 22:26:26 +0000 |
---|---|---|
committer | miod <> | 2014-04-23 22:26:26 +0000 |
commit | 57f363f2f8ca275d715c73b6a4af0dadbc19d804 (patch) | |
tree | fdc347c1b6ae5bb862c0b018453022fe0225f681 /src/lib/libssl/ssl.h | |
parent | 7aa32b6e8c2f36d05bd2d61063dbe667bb62842a (diff) | |
download | openbsd-57f363f2f8ca275d715c73b6a4af0dadbc19d804.tar.gz openbsd-57f363f2f8ca275d715c73b6a4af0dadbc19d804.tar.bz2 openbsd-57f363f2f8ca275d715c73b6a4af0dadbc19d804.zip |
Unifdef -UPKCS1_CHECK and remove SSL_OP_PKCS1_CHECK_[12], this is leftover
``debug'' code from a 15+ years old bugfix and the SSL_OP_PKCS1_CHECK_*
constants have had a value of zero since ages. No production code should use
them.
ok beck@
Diffstat (limited to 'src/lib/libssl/ssl.h')
-rw-r--r-- | src/lib/libssl/ssl.h | 8 |
1 files changed, 0 insertions, 8 deletions
diff --git a/src/lib/libssl/ssl.h b/src/lib/libssl/ssl.h index 3624bdcccd..d3c7908a26 100644 --- a/src/lib/libssl/ssl.h +++ b/src/lib/libssl/ssl.h | |||
@@ -599,14 +599,6 @@ struct ssl_session_st { | |||
599 | #define SSL_OP_NO_TLSv1_2 0x08000000L | 599 | #define SSL_OP_NO_TLSv1_2 0x08000000L |
600 | #define SSL_OP_NO_TLSv1_1 0x10000000L | 600 | #define SSL_OP_NO_TLSv1_1 0x10000000L |
601 | 601 | ||
602 | /* These next two were never actually used for anything since SSLeay | ||
603 | * zap so we have some more flags. | ||
604 | */ | ||
605 | /* The next flag deliberately changes the ciphertest, this is a check | ||
606 | * for the PKCS#1 attack */ | ||
607 | #define SSL_OP_PKCS1_CHECK_1 0x0 | ||
608 | #define SSL_OP_PKCS1_CHECK_2 0x0 | ||
609 | |||
610 | #define SSL_OP_NETSCAPE_CA_DN_BUG 0x20000000L | 602 | #define SSL_OP_NETSCAPE_CA_DN_BUG 0x20000000L |
611 | #define SSL_OP_NETSCAPE_DEMO_CIPHER_CHANGE_BUG 0x40000000L | 603 | #define SSL_OP_NETSCAPE_DEMO_CIPHER_CHANGE_BUG 0x40000000L |
612 | /* Make server add server-hello extension from early version of | 604 | /* Make server add server-hello extension from early version of |