From c4c220a34fb8ef8921b6629e0de8a0761a7d8a66 Mon Sep 17 00:00:00 2001
From: jsing <>
Date: Thu, 10 Sep 2015 17:57:50 +0000
Subject: Remove support for DTLS_BAD_VER. We do not support non-standard and
 incomplete implementations just so that we can interoperate with products
 from vendors who have not bothered to fix things in the last ~10 years.

ok bcook@ miod@
---
 src/lib/libssl/s3_srvr.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'src/lib/libssl/s3_srvr.c')

diff --git a/src/lib/libssl/s3_srvr.c b/src/lib/libssl/s3_srvr.c
index b2c4f8e0d2..4bbc160d58 100644
--- a/src/lib/libssl/s3_srvr.c
+++ b/src/lib/libssl/s3_srvr.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: s3_srvr.c,v 1.116 2015/09/10 15:56:26 jsing Exp $ */
+/* $OpenBSD: s3_srvr.c,v 1.117 2015/09/10 17:57:50 jsing Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -1650,7 +1650,7 @@ ssl3_get_client_key_exchange(SSL *s)
 		rsa = pkey->pkey.rsa;
 
 		/* TLS and [incidentally] DTLS{0xFEFF} */
-		if (s->version > SSL3_VERSION && s->version != DTLS1_BAD_VER) {
+		if (s->version > SSL3_VERSION) {
 			if (2 > n)
 				goto truncated;
 			n2s(p, i);
-- 
cgit v1.2.3-55-g6feb