From bb381a403dc7a97a33d072ed48e90a2236ceb69e Mon Sep 17 00:00:00 2001
From: jsing <>
Date: Thu, 12 Feb 2015 04:31:27 +0000
Subject: Fix handling of "legacy" mode for tls_config_set_dheparams().

Found by reyk@
---
 src/lib/libtls/tls_config.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'src/lib/libtls/tls_config.c')

diff --git a/src/lib/libtls/tls_config.c b/src/lib/libtls/tls_config.c
index 116cde8297..4342b5a565 100644
--- a/src/lib/libtls/tls_config.c
+++ b/src/lib/libtls/tls_config.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: tls_config.c,v 1.4 2015/02/11 06:46:33 jsing Exp $ */
+/* $OpenBSD: tls_config.c,v 1.5 2015/02/12 04:31:27 jsing Exp $ */
 /*
  * Copyright (c) 2014 Joel Sing <jsing@openbsd.org>
  *
@@ -154,7 +154,7 @@ tls_config_set_dheparams(struct tls_config *config, const char *params)
 		keylen = 0;
 	else if (strcasecmp(params, "auto") == 0)
 		keylen = -1;
-	else if (strcmp(params, "legacy"))
+	else if (strcasecmp(params, "legacy") == 0)
 		keylen = 1024;
 	else
 		return (-1);
-- 
cgit v1.2.3-55-g6feb