diff options
Diffstat (limited to 'src/lib/libssl/ssl_versions.c')
-rw-r--r-- | src/lib/libssl/ssl_versions.c | 21 |
1 files changed, 10 insertions, 11 deletions
diff --git a/src/lib/libssl/ssl_versions.c b/src/lib/libssl/ssl_versions.c index 68e69ebca3..c633b58c25 100644 --- a/src/lib/libssl/ssl_versions.c +++ b/src/lib/libssl/ssl_versions.c | |||
@@ -1,4 +1,4 @@ | |||
1 | /* $OpenBSD: ssl_versions.c,v 1.19 2021/06/27 16:54:14 jsing Exp $ */ | 1 | /* $OpenBSD: ssl_versions.c,v 1.20 2021/07/01 17:53:39 jsing Exp $ */ |
2 | /* | 2 | /* |
3 | * Copyright (c) 2016, 2017 Joel Sing <jsing@openbsd.org> | 3 | * Copyright (c) 2016, 2017 Joel Sing <jsing@openbsd.org> |
4 | * | 4 | * |
@@ -61,7 +61,7 @@ ssl_version_set_min(const SSL_METHOD *meth, uint16_t proto_ver, | |||
61 | uint16_t min_proto, min_version, max_version; | 61 | uint16_t min_proto, min_version, max_version; |
62 | 62 | ||
63 | if (proto_ver == 0) { | 63 | if (proto_ver == 0) { |
64 | *out_tls_ver = meth->internal->min_tls_version; | 64 | *out_tls_ver = meth->min_tls_version; |
65 | *out_proto_ver = 0; | 65 | *out_proto_ver = 0; |
66 | return 1; | 66 | return 1; |
67 | } | 67 | } |
@@ -69,17 +69,17 @@ ssl_version_set_min(const SSL_METHOD *meth, uint16_t proto_ver, | |||
69 | min_version = proto_ver; | 69 | min_version = proto_ver; |
70 | max_version = max_tls_ver; | 70 | max_version = max_tls_ver; |
71 | 71 | ||
72 | if (meth->internal->dtls) { | 72 | if (meth->dtls) { |
73 | if ((min_version = ssl_dtls_to_tls_version(proto_ver)) == 0) | 73 | if ((min_version = ssl_dtls_to_tls_version(proto_ver)) == 0) |
74 | return 0; | 74 | return 0; |
75 | } | 75 | } |
76 | 76 | ||
77 | if (!ssl_clamp_tls_version_range(&min_version, &max_version, | 77 | if (!ssl_clamp_tls_version_range(&min_version, &max_version, |
78 | meth->internal->min_tls_version, meth->internal->max_tls_version)) | 78 | meth->min_tls_version, meth->max_tls_version)) |
79 | return 0; | 79 | return 0; |
80 | 80 | ||
81 | min_proto = min_version; | 81 | min_proto = min_version; |
82 | if (meth->internal->dtls) { | 82 | if (meth->dtls) { |
83 | if ((min_proto = ssl_tls_to_dtls_version(min_version)) == 0) | 83 | if ((min_proto = ssl_tls_to_dtls_version(min_version)) == 0) |
84 | return 0; | 84 | return 0; |
85 | } | 85 | } |
@@ -96,7 +96,7 @@ ssl_version_set_max(const SSL_METHOD *meth, uint16_t proto_ver, | |||
96 | uint16_t max_proto, min_version, max_version; | 96 | uint16_t max_proto, min_version, max_version; |
97 | 97 | ||
98 | if (proto_ver == 0) { | 98 | if (proto_ver == 0) { |
99 | *out_tls_ver = meth->internal->max_tls_version; | 99 | *out_tls_ver = meth->max_tls_version; |
100 | *out_proto_ver = 0; | 100 | *out_proto_ver = 0; |
101 | return 1; | 101 | return 1; |
102 | } | 102 | } |
@@ -104,17 +104,17 @@ ssl_version_set_max(const SSL_METHOD *meth, uint16_t proto_ver, | |||
104 | min_version = min_tls_ver; | 104 | min_version = min_tls_ver; |
105 | max_version = proto_ver; | 105 | max_version = proto_ver; |
106 | 106 | ||
107 | if (meth->internal->dtls) { | 107 | if (meth->dtls) { |
108 | if ((max_version = ssl_dtls_to_tls_version(proto_ver)) == 0) | 108 | if ((max_version = ssl_dtls_to_tls_version(proto_ver)) == 0) |
109 | return 0; | 109 | return 0; |
110 | } | 110 | } |
111 | 111 | ||
112 | if (!ssl_clamp_tls_version_range(&min_version, &max_version, | 112 | if (!ssl_clamp_tls_version_range(&min_version, &max_version, |
113 | meth->internal->min_tls_version, meth->internal->max_tls_version)) | 113 | meth->min_tls_version, meth->max_tls_version)) |
114 | return 0; | 114 | return 0; |
115 | 115 | ||
116 | max_proto = max_version; | 116 | max_proto = max_version; |
117 | if (meth->internal->dtls) { | 117 | if (meth->dtls) { |
118 | if ((max_proto = ssl_tls_to_dtls_version(max_version)) == 0) | 118 | if ((max_proto = ssl_tls_to_dtls_version(max_version)) == 0) |
119 | return 0; | 119 | return 0; |
120 | } | 120 | } |
@@ -195,8 +195,7 @@ ssl_supported_tls_version_range(SSL *s, uint16_t *min_ver, uint16_t *max_ver) | |||
195 | 195 | ||
196 | /* Limit to the versions supported by this method. */ | 196 | /* Limit to the versions supported by this method. */ |
197 | if (!ssl_clamp_tls_version_range(&min_version, &max_version, | 197 | if (!ssl_clamp_tls_version_range(&min_version, &max_version, |
198 | s->method->internal->min_tls_version, | 198 | s->method->min_tls_version, s->method->max_tls_version)) |
199 | s->method->internal->max_tls_version)) | ||
200 | return 0; | 199 | return 0; |
201 | 200 | ||
202 | if (min_ver != NULL) | 201 | if (min_ver != NULL) |