summaryrefslogtreecommitdiff
path: root/src/lib/libssl/ssl_locl.h
diff options
context:
space:
mode:
authorjsing <>2020-10-11 02:22:27 +0000
committerjsing <>2020-10-11 02:22:27 +0000
commitde4705827be90015506e4065c5fcaa759a5eeb2e (patch)
treea536d961ab89e5f295dc904ee7d6fcf5483675c9 /src/lib/libssl/ssl_locl.h
parent4884af0400cb036042f4e33c5f8c58fb076986b4 (diff)
downloadopenbsd-de4705827be90015506e4065c5fcaa759a5eeb2e.tar.gz
openbsd-de4705827be90015506e4065c5fcaa759a5eeb2e.tar.bz2
openbsd-de4705827be90015506e4065c5fcaa759a5eeb2e.zip
Condense and simplify TLS methods.
Historically, OpenSSL has had client and server specific methods - the only difference between these is that the .ssl_connect or .ssl_accept function pointer is set to ssl_undefined_function, with the intention of reducing code size for a statically linked binary that was only a client or server. These days the difference is minimal or non-existant in many cases and we can reduce the amount of code and complexity by having single method. Internally remove all of the client and server specific methods, simplifying code in the process. The external client/server specific API remain, however these now return the same thing as TLS_method() does. ok tb@
Diffstat (limited to 'src/lib/libssl/ssl_locl.h')
-rw-r--r--src/lib/libssl/ssl_locl.h8
1 files changed, 2 insertions, 6 deletions
diff --git a/src/lib/libssl/ssl_locl.h b/src/lib/libssl/ssl_locl.h
index e47f6191c2..e341e9eda2 100644
--- a/src/lib/libssl/ssl_locl.h
+++ b/src/lib/libssl/ssl_locl.h
@@ -1,4 +1,4 @@
1/* $OpenBSD: ssl_locl.h,v 1.301 2020/10/11 01:16:31 guenther Exp $ */ 1/* $OpenBSD: ssl_locl.h,v 1.302 2020/10/11 02:22:27 jsing Exp $ */
2/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) 2/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3 * All rights reserved. 3 * All rights reserved.
4 * 4 *
@@ -1121,11 +1121,7 @@ int ssl_cipher_allowed_in_version_range(const SSL_CIPHER *cipher,
1121 uint16_t min_ver, uint16_t max_ver); 1121 uint16_t min_ver, uint16_t max_ver);
1122 1122
1123const SSL_METHOD *tls_legacy_method(void); 1123const SSL_METHOD *tls_legacy_method(void);
1124const SSL_METHOD *tls_legacy_client_method(void); 1124const SSL_METHOD *ssl_get_method(uint16_t version);
1125const SSL_METHOD *tls_legacy_server_method(void);
1126
1127const SSL_METHOD *ssl_get_client_method(uint16_t version);
1128const SSL_METHOD *ssl_get_server_method(uint16_t version);
1129 1125
1130extern SSL3_ENC_METHOD TLSv1_enc_data; 1126extern SSL3_ENC_METHOD TLSv1_enc_data;
1131extern SSL3_ENC_METHOD TLSv1_1_enc_data; 1127extern SSL3_ENC_METHOD TLSv1_1_enc_data;