[prev in list] [next in list] [prev in thread] [next in thread] 

List:       openssl-cvs
Subject:    [CVS] OpenSSL: OpenSSL_1_0_2-stable: openssl/ssl/ t1_lib.c
From:       "Dr. Stephen Henson" <steve () openssl ! org>
Date:       2012-12-26 17:09:40
Message-ID: 20121226170940.085682BF38 () master ! openssl ! org
[Download RAW message or body]

  OpenSSL CVS Repository
  http://cvs.openssl.org/
  ____________________________________________________________________________

  Server: cvs.openssl.org                  Name:   Dr. Stephen Henson
  Root:   /v/openssl/cvs                   Email:  steve@openssl.org
  Module: openssl                          Date:   26-Dec-2012 18:09:40
  Branch: OpenSSL_1_0_2-stable             Handle: 2012122617093900

  Modified files:           (Branch: OpenSSL_1_0_2-stable)
    openssl/ssl             t1_lib.c

  Log:
    Use client version when deciding which cipher suites to disable.
    (backport from HEAD)

  Summary:
    Revision    Changes     Path
    1.64.2.14.2.32.2.33+1  -1      openssl/ssl/t1_lib.c
  ____________________________________________________________________________

  patch -p0 <<'@@ .'
  Index: openssl/ssl/t1_lib.c
  ============================================================================
  $ cvs diff -u -r1.64.2.14.2.32.2.32 -r1.64.2.14.2.32.2.33 t1_lib.c
  --- openssl/ssl/t1_lib.c	26 Dec 2012 17:09:14 -0000	1.64.2.14.2.32.2.32
  +++ openssl/ssl/t1_lib.c	26 Dec 2012 17:09:39 -0000	1.64.2.14.2.32.2.33
  @@ -957,7 +957,7 @@
   	c->mask_a = 0;
   	c->mask_k = 0;
   	/* If less than TLS 1.2 don't allow TLS 1.2 only ciphers */
  -	if (TLS1_get_version(s) < TLS1_2_VERSION)
  +	if (TLS1_get_client_version(s) < TLS1_2_VERSION)
   		c->mask_ssl = SSL_TLSV1_2;
   	else
   		c->mask_ssl = 0;
  @@ .
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
CVS Repository Commit List                     openssl-cvs@openssl.org
Automated List Manager                           majordomo@openssl.org
[prev in list] [next in list] [prev in thread] [next in thread]