diff options
Diffstat (limited to 'src/lib/libssl/s3_clnt.c')
-rw-r--r-- | src/lib/libssl/s3_clnt.c | 12 |
1 files changed, 1 insertions, 11 deletions
diff --git a/src/lib/libssl/s3_clnt.c b/src/lib/libssl/s3_clnt.c index 07d2eb583a..8a137056be 100644 --- a/src/lib/libssl/s3_clnt.c +++ b/src/lib/libssl/s3_clnt.c | |||
@@ -1,4 +1,4 @@ | |||
1 | /* $OpenBSD: s3_clnt.c,v 1.110 2015/03/27 12:29:54 jsing Exp $ */ | 1 | /* $OpenBSD: s3_clnt.c,v 1.111 2015/03/31 13:17:48 jsing Exp $ */ |
2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) | 2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) |
3 | * All rights reserved. | 3 | * All rights reserved. |
4 | * | 4 | * |
@@ -710,16 +710,6 @@ ssl3_client_hello(SSL *s) | |||
710 | SSL_R_NO_CIPHERS_AVAILABLE); | 710 | SSL_R_NO_CIPHERS_AVAILABLE); |
711 | goto err; | 711 | goto err; |
712 | } | 712 | } |
713 | #ifdef OPENSSL_MAX_TLS1_2_CIPHER_LENGTH | ||
714 | /* | ||
715 | * Some servers hang if client hello > 256 bytes | ||
716 | * as hack workaround chop number of supported ciphers | ||
717 | * to keep it well below this if we use TLS v1.2 | ||
718 | */ | ||
719 | if (TLS1_get_version(s) >= TLS1_2_VERSION && | ||
720 | i > OPENSSL_MAX_TLS1_2_CIPHER_LENGTH) | ||
721 | i = OPENSSL_MAX_TLS1_2_CIPHER_LENGTH & ~1; | ||
722 | #endif | ||
723 | s2n(i, p); | 713 | s2n(i, p); |
724 | p += i; | 714 | p += i; |
725 | 715 | ||