diff options
| author | Joel Sing <jsing@cvs.openbsd.org> | 2016-12-30 16:57:02 +0000 |
|---|---|---|
| committer | Joel Sing <jsing@cvs.openbsd.org> | 2016-12-30 16:57:02 +0000 |
| commit | 8753370e290188fd5e484a2be386f9f58be76d18 (patch) | |
| tree | c8f8663f8b91e7f7a39467f904822abd70e6b066 /lib/libssl/ssl_locl.h | |
| parent | b6f18f2d51764df3655cb457de0dfe7e444194ee (diff) | |
Pull out (and largely rewrite) the code that determines the enabled
protocol version range.
This also fixes a bug whereby if all protocols were disabled, the client
would still use TLSv1.2 in the client hello, only to have if fail with
unsupported version when it received and processed the server hello.
ok doug@
Diffstat (limited to 'lib/libssl/ssl_locl.h')
| -rw-r--r-- | lib/libssl/ssl_locl.h | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/lib/libssl/ssl_locl.h b/lib/libssl/ssl_locl.h index de977846a41..e8fbd235725 100644 --- a/lib/libssl/ssl_locl.h +++ b/lib/libssl/ssl_locl.h @@ -1,4 +1,4 @@ -/* $OpenBSD: ssl_locl.h,v 1.142 2016/12/30 15:12:45 jsing Exp $ */ +/* $OpenBSD: ssl_locl.h,v 1.143 2016/12/30 16:57:01 jsing Exp $ */ /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) * All rights reserved. * @@ -497,6 +497,7 @@ extern SSL3_ENC_METHOD ssl3_undef_enc_method; extern SSL_CIPHER ssl3_ciphers[]; const char *ssl_version_string(int ver); +int ssl_enabled_version_range(SSL *s, uint16_t *min_ver, uint16_t *max_ver); uint16_t ssl_max_server_version(SSL *s); extern SSL3_ENC_METHOD DTLSv1_enc_data; |