summaryrefslogtreecommitdiff
path: root/lib/libssl/ssl3.h
diff options
context:
space:
mode:
authorDoug Hogan <doug@cvs.openbsd.org>2015-06-18 22:51:06 +0000
committerDoug Hogan <doug@cvs.openbsd.org>2015-06-18 22:51:06 +0000
commitb1301b3c17b87991a986c68104bfc416a715f523 (patch)
treebf56b75f5e19352eaec6461ea16a2aad840c2454 /lib/libssl/ssl3.h
parente5e56cf2cf8d060db486e643a5461ea75d4c1486 (diff)
Remove Microsoft Server Gated Crypto.
Another relic due to the old US crypto policy. From OpenSSL commit 63eab8a620944a990ab3985620966ccd9f48d681 and 95275599399e277e71d064790a1f828a99fc661a. ok jsing@ miod@
Diffstat (limited to 'lib/libssl/ssl3.h')
-rw-r--r--lib/libssl/ssl3.h13
1 files changed, 1 insertions, 12 deletions
diff --git a/lib/libssl/ssl3.h b/lib/libssl/ssl3.h
index 61f600c55d0..265d18810e4 100644
--- a/lib/libssl/ssl3.h
+++ b/lib/libssl/ssl3.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssl3.h,v 1.36 2015/02/22 15:54:27 jsing Exp $ */
+/* $OpenBSD: ssl3.h,v 1.37 2015/06/18 22:51:05 doug Exp $ */
/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
* All rights reserved.
*
@@ -356,17 +356,6 @@ typedef struct ssl3_buffer_st {
#define TLS1_FLAGS_KEEP_HANDSHAKE 0x0020
#define SSL3_FLAGS_CCS_OK 0x0080
-/* SSL3_FLAGS_SGC_RESTART_DONE is set when we
- * restart a handshake because of MS SGC and so prevents us
- * from restarting the handshake in a loop. It's reset on a
- * renegotiation, so effectively limits the client to one restart
- * per negotiation. This limits the possibility of a DDoS
- * attack where the client handshakes in a loop using SGC to
- * restart. Servers which permit renegotiation can still be
- * effected, but we can't prevent that.
- */
-#define SSL3_FLAGS_SGC_RESTART_DONE 0x0040
-
#ifndef OPENSSL_NO_SSL_INTERN
typedef struct ssl3_state_st {