diff options
author | beck <> | 2024-02-03 15:58:34 +0000 |
---|---|---|
committer | beck <> | 2024-02-03 15:58:34 +0000 |
commit | feaf10d0a7eb5e59e69c058b10c91c45d2b1b0e3 (patch) | |
tree | dc1f0834366a35df8a6de61e2722798629d7c4c2 /src/lib/libssl/ssl3.h | |
parent | a931b9fe4c471545a30c6975c303fa27abc695af (diff) | |
download | openbsd-feaf10d0a7eb5e59e69c058b10c91c45d2b1b0e3.tar.gz openbsd-feaf10d0a7eb5e59e69c058b10c91c45d2b1b0e3.tar.bz2 openbsd-feaf10d0a7eb5e59e69c058b10c91c45d2b1b0e3.zip |
Remove GOST and STREEBOG support from libssl.
This version of GOST is old and not anywhere close to compliant with
modern GOST standards. It is also very intrusive in libssl and
makes a mess everywhere. Efforts to entice a suitably minded anyone
to care about it have been unsuccessful.
At this point it is probably best to remove this, and if someone
ever showed up who truly needed a working version, it should be
a clean implementation from scratch, and have it use something
closer to the typical API in libcrypto so it would integrate less
painfully here.
This removes it from libssl in preparation for it's removal from
libcrypto with a future major bump
ok tb@
Diffstat (limited to 'src/lib/libssl/ssl3.h')
-rw-r--r-- | src/lib/libssl/ssl3.h | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/lib/libssl/ssl3.h b/src/lib/libssl/ssl3.h index 6c6cc2ad2b..603d9ccb4f 100644 --- a/src/lib/libssl/ssl3.h +++ b/src/lib/libssl/ssl3.h | |||
@@ -1,4 +1,4 @@ | |||
1 | /* $OpenBSD: ssl3.h,v 1.57 2021/09/10 14:49:13 tb Exp $ */ | 1 | /* $OpenBSD: ssl3.h,v 1.58 2024/02/03 15:58:33 beck Exp $ */ |
2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) | 2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) |
3 | * All rights reserved. | 3 | * All rights reserved. |
4 | * | 4 | * |
@@ -325,7 +325,7 @@ extern "C" { | |||
325 | * enough to contain all of the cert types defined either for | 325 | * enough to contain all of the cert types defined either for |
326 | * SSLv3 and TLSv1. | 326 | * SSLv3 and TLSv1. |
327 | */ | 327 | */ |
328 | #define SSL3_CT_NUMBER 13 | 328 | #define SSL3_CT_NUMBER 7 |
329 | 329 | ||
330 | #define SSL3_FLAGS_NO_RENEGOTIATE_CIPHERS 0x0001 | 330 | #define SSL3_FLAGS_NO_RENEGOTIATE_CIPHERS 0x0001 |
331 | #define TLS1_FLAGS_SKIP_CERT_VERIFY 0x0010 | 331 | #define TLS1_FLAGS_SKIP_CERT_VERIFY 0x0010 |