jinql
/
openssl-patch
mirror of https://github.com/hakasenyang/openssl-patch
1
0
Fork 0
Code Issues Releases Wiki Activity

Update openssl-equal-pre2.patch

openssl-1.1.1
Hakase 2018-04-23 00:55:04 +09:00
parent a907e538d8
commit 9c941a677b
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
openssl-equal-pre2.patch
View File

@ -186,7 +186,7 @@ diff -urN 1/ssl/s3_lib.c 2/ssl/s3_lib.c
+ ok = 0;
+ /* not use ECDSA under TLS v1.2 */
+ // if ((alg_a & SSL_aECDSA) && s->version != TLS1_2_VERSION) ok = 0;
+ if ((alg_a & SSL_aRSA) && (alg_k & SSL_kRSA) && s->version == TLS1_2_VERSION) ok = 0;
+ if ((alg_a & SSL_aRSA) && (alg_k & SSL_kRSA) && (c->algorithm_mac != SSL_AEAD) && s->version == TLS1_2_VERSION) ok = 0;
+
#ifndef OPENSSL_NO_PSK
/* with PSK there must be server callback set */