diff options
| author | Joel Sing <jsing@cvs.openbsd.org> | 2014-08-23 15:37:39 +0000 |
|---|---|---|
| committer | Joel Sing <jsing@cvs.openbsd.org> | 2014-08-23 15:37:39 +0000 |
| commit | 358660bb4be5b51ee79850937d4361b064eb7a37 (patch) | |
| tree | 2fc0fc5ff763bc7714cc6e94f2323778a1c354b2 /lib | |
| parent | ae17dc64299220e105dd27da687535ea3c157aed (diff) | |
Remove non-standard GOST cipher suites (which are not compiled in
currently).
From Dmitry Eremin-Solenikov.
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/libssl/src/ssl/s3_lib.c | 69 |
1 files changed, 1 insertions, 68 deletions
diff --git a/lib/libssl/src/ssl/s3_lib.c b/lib/libssl/src/ssl/s3_lib.c index 1578f0388dc..9a256430709 100644 --- a/lib/libssl/src/ssl/s3_lib.c +++ b/lib/libssl/src/ssl/s3_lib.c @@ -1,4 +1,4 @@ -/* $OpenBSD: s3_lib.c,v 1.77 2014/08/23 14:52:41 jsing Exp $ */ +/* $OpenBSD: s3_lib.c,v 1.78 2014/08/23 15:37:38 jsing Exp $ */ /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) * All rights reserved. * @@ -1705,73 +1705,6 @@ SSL_CIPHER ssl3_ciphers[] = { .alg_bits = 256, }, -#ifdef TEMP_GOST_TLS - /* Cipher FF00 */ - { - .valid = 1, - .name = "GOST-MD5", - .id = 0x0300ff00, - .algorithm_mkey = SSL_kRSA, - .algorithm_auth = SSL_aRSA, - .algorithm_enc = SSL_eGOST2814789CNT, - .algorithm_mac = SSL_MD5, - .algorithm_ssl = SSL_TLSV1, - .algo_strength = SSL_HIGH, - .algorithm2 = SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF, - .strength_bits = 256, - .alg_bits = 256, - }, - - /* Cipher FF01 */ - { - .valid = 1, - .name = "GOST-GOST94", - .id = 0x0300ff01, - .algorithm_mkey = SSL_kRSA, - .algorithm_auth = SSL_aRSA, - .algorithm_enc = SSL_eGOST2814789CNT, - .algorithm_mac = SSL_GOST94, - .algorithm_ssl = SSL_TLSV1, - .algo_strength = SSL_HIGH, - .algorithm2 = SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF, - .strength_bits = 256, - .alg_bits = 256 - }, - - /* Cipher FF02 */ - { - .valid = 1, - .name = "GOST-GOST89MAC", - .id = 0x0300ff02, - .algorithm_mkey = SSL_kRSA, - .algorithm_auth = SSL_aRSA, - .algorithm_enc = SSL_eGOST2814789CNT, - .algorithm_mac = SSL_GOST89MAC, - .algorithm_ssl = SSL_TLSV1, - .algo_strength = SSL_HIGH, - .algorithm2 = SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF, - .strength_bits = 256, - .alg_bits = 256 - }, - - /* Cipher FF03 */ - { - .valid = 1, - .name = "GOST-GOST89STREAM", - .id = 0x0300ff03, - .algorithm_mkey = SSL_kRSA, - .algorithm_auth = SSL_aRSA, - .algorithm_enc = SSL_eGOST2814789CNT, - .algorithm_mac = SSL_GOST89MAC, - .algorithm_ssl = SSL_TLSV1, - .algo_strength = SSL_HIGH, - .algorithm2 = SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF| - TLS1_STREAM_MAC, - .strength_bits = 256, - .alg_bits = 256 - }, -#endif - #if !defined(OPENSSL_NO_CHACHA) && !defined(OPENSSL_NO_POLY1305) /* Cipher CC13 */ { |