summaryrefslogtreecommitdiff
path: root/src/lib/libssl/ssl_versions.c
diff options
context:
space:
mode:
authorjsing <>2020-05-31 18:03:32 +0000
committerjsing <>2020-05-31 18:03:32 +0000
commit95d91de56d07efcd6dd35c2b3815d31608c9ba7f (patch)
treeba2c4b8a939c7f41a540f91b545d382c51e1939c /src/lib/libssl/ssl_versions.c
parentac59d0e35f28383b918365d1f209defd9cc9ffd5 (diff)
downloadopenbsd-95d91de56d07efcd6dd35c2b3815d31608c9ba7f.tar.gz
openbsd-95d91de56d07efcd6dd35c2b3815d31608c9ba7f.tar.bz2
openbsd-95d91de56d07efcd6dd35c2b3815d31608c9ba7f.zip
Replace ssl_max_server_version() with ssl_downgrade_max_version()
Replace the only occurrence of ssl_max_server_version() with a call to ssl_downgrade_max_version() and remove ssl_max_server_version(). ok beck@ tb@
Diffstat (limited to 'src/lib/libssl/ssl_versions.c')
-rw-r--r--src/lib/libssl/ssl_versions.c26
1 files changed, 1 insertions, 25 deletions
diff --git a/src/lib/libssl/ssl_versions.c b/src/lib/libssl/ssl_versions.c
index 03eb41582a..b21fa7198c 100644
--- a/src/lib/libssl/ssl_versions.c
+++ b/src/lib/libssl/ssl_versions.c
@@ -1,4 +1,4 @@
1/* $OpenBSD: ssl_versions.c,v 1.5 2020/05/31 16:36:35 jsing Exp $ */ 1/* $OpenBSD: ssl_versions.c,v 1.6 2020/05/31 18:03:32 jsing Exp $ */
2/* 2/*
3 * Copyright (c) 2016, 2017 Joel Sing <jsing@openbsd.org> 3 * Copyright (c) 2016, 2017 Joel Sing <jsing@openbsd.org>
4 * 4 *
@@ -200,30 +200,6 @@ ssl_max_shared_version(SSL *s, uint16_t peer_ver, uint16_t *max_ver)
200 return 1; 200 return 1;
201} 201}
202 202
203uint16_t
204ssl_max_server_version(SSL *s)
205{
206 uint16_t max_version, min_version = 0;
207
208 if (SSL_IS_DTLS(s))
209 return (DTLS1_VERSION);
210
211 if (!ssl_enabled_version_range(s, &min_version, &max_version))
212 return 0;
213
214 /*
215 * Limit to the versions supported by this method. The SSL method
216 * will be changed during version negotiation, as such we want to
217 * use the SSL method from the context.
218 */
219 if (!ssl_clamp_version_range(&min_version, &max_version,
220 s->ctx->method->internal->min_version,
221 s->ctx->method->internal->max_version))
222 return 0;
223
224 return (max_version);
225}
226
227int 203int
228ssl_downgrade_max_version(SSL *s, uint16_t *max_ver) 204ssl_downgrade_max_version(SSL *s, uint16_t *max_ver)
229{ 205{