diff options
author | doug <> | 2015-07-17 15:50:37 +0000 |
---|---|---|
committer | doug <> | 2015-07-17 15:50:37 +0000 |
commit | 1dfd1cf6c439ce0e41c7f3ac112e6531381c6af7 (patch) | |
tree | feb649947db1c2e92858c29d6aa7029f188bfa9b /src/lib/libssl/ssl3.h | |
parent | 489dbb57ee3abd9d28ef0c63007d420b6a34b1f4 (diff) | |
download | openbsd-1dfd1cf6c439ce0e41c7f3ac112e6531381c6af7.tar.gz openbsd-1dfd1cf6c439ce0e41c7f3ac112e6531381c6af7.tar.bz2 openbsd-1dfd1cf6c439ce0e41c7f3ac112e6531381c6af7.zip |
Remove compat hack that disabled ECDHE-ECDSA on OS X.
For a few old releases, ECDHE-ECDSA was broken on OS X. This option
cannot differentiate between working and broken OS X so it disabled
ECDHE-ECDSA support on all OS X >= 10.6. 10.8-10.8.3 were the faulty
releases but these are no longer relevant. Tested on OS X 10.10 by jsing.
ok jsing@
Diffstat (limited to 'src/lib/libssl/ssl3.h')
-rw-r--r-- | src/lib/libssl/ssl3.h | 9 |
1 files changed, 5 insertions, 4 deletions
diff --git a/src/lib/libssl/ssl3.h b/src/lib/libssl/ssl3.h index 8bcf9e37e8..4de50428a8 100644 --- a/src/lib/libssl/ssl3.h +++ b/src/lib/libssl/ssl3.h | |||
@@ -1,4 +1,4 @@ | |||
1 | /* $OpenBSD: ssl3.h,v 1.38 2015/07/17 07:04:41 doug Exp $ */ | 1 | /* $OpenBSD: ssl3.h,v 1.39 2015/07/17 15:50:37 doug Exp $ */ |
2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) | 2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) |
3 | * All rights reserved. | 3 | * All rights reserved. |
4 | * | 4 | * |
@@ -490,9 +490,10 @@ typedef struct ssl3_state_st { | |||
490 | unsigned char *alpn_selected; | 490 | unsigned char *alpn_selected; |
491 | unsigned int alpn_selected_len; | 491 | unsigned int alpn_selected_len; |
492 | 492 | ||
493 | /* This is set to true if we believe that this is a version of Safari | 493 | /* |
494 | * running on OS X 10.6 or newer. We wish to know this because Safari | 494 | * XXX delete on next major bump. This was for old OS X releases |
495 | * on 10.8 .. 10.8.3 has broken ECDHE-ECDSA support. */ | 495 | * with broken ECDHE-ECDSA support. |
496 | */ | ||
496 | char is_probably_safari; | 497 | char is_probably_safari; |
497 | } SSL3_STATE; | 498 | } SSL3_STATE; |
498 | 499 | ||