summaryrefslogtreecommitdiff
path: root/src/lib/libssl/ssl_cert.c
diff options
context:
space:
mode:
authorjsing <>2014-12-10 15:36:47 +0000
committerjsing <>2014-12-10 15:36:47 +0000
commit1434a91c4d4dc782915ce81dd056fa8f6cb77ae1 (patch)
tree8f2441ed940045edc4ad4d11ab3d8395f2830a78 /src/lib/libssl/ssl_cert.c
parent7b2f3298f7eb7ce5cfd1c3eb55b1ecc89118f52c (diff)
downloadopenbsd-1434a91c4d4dc782915ce81dd056fa8f6cb77ae1.tar.gz
openbsd-1434a91c4d4dc782915ce81dd056fa8f6cb77ae1.tar.bz2
openbsd-1434a91c4d4dc782915ce81dd056fa8f6cb77ae1.zip
Remove support for GOST R 34.10-94 signature authentication, along with
the two ciphersuites that use it. GOST94 public/private keys have been long obsoleted and libcrypto does not have support for them anyway. Discussed with Dmitry Eremin-Solenikov.
Diffstat (limited to 'src/lib/libssl/ssl_cert.c')
-rw-r--r--src/lib/libssl/ssl_cert.c3
1 files changed, 1 insertions, 2 deletions
diff --git a/src/lib/libssl/ssl_cert.c b/src/lib/libssl/ssl_cert.c
index 8f830d990a..323421f5db 100644
--- a/src/lib/libssl/ssl_cert.c
+++ b/src/lib/libssl/ssl_cert.c
@@ -1,4 +1,4 @@
1/* $OpenBSD: ssl_cert.c,v 1.47 2014/12/06 14:24:26 jsing Exp $ */ 1/* $OpenBSD: ssl_cert.c,v 1.48 2014/12/10 15:36:47 jsing Exp $ */
2/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) 2/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3 * All rights reserved. 3 * All rights reserved.
4 * 4 *
@@ -167,7 +167,6 @@ ssl_cert_set_default_md(CERT *cert)
167 cert->pkeys[SSL_PKEY_RSA_ENC].digest = EVP_sha1(); 167 cert->pkeys[SSL_PKEY_RSA_ENC].digest = EVP_sha1();
168 cert->pkeys[SSL_PKEY_ECC].digest = EVP_sha1(); 168 cert->pkeys[SSL_PKEY_ECC].digest = EVP_sha1();
169#ifndef OPENSSL_NO_GOST 169#ifndef OPENSSL_NO_GOST
170 cert->pkeys[SSL_PKEY_GOST94].digest = EVP_gostr341194();
171 cert->pkeys[SSL_PKEY_GOST01].digest = EVP_gostr341194(); 170 cert->pkeys[SSL_PKEY_GOST01].digest = EVP_gostr341194();
172#endif 171#endif
173} 172}