]> git.ipfire.org Git - thirdparty/haproxy.git/commitdiff
MINOR: ssl: don't show prefer-server-ciphers output
authorLukas Tribus <luky-37@hotmail.com>
Wed, 11 Jan 2017 22:47:18 +0000 (22:47 +0000)
committerWilly Tarreau <w@1wt.eu>
Thu, 12 Jan 2017 06:45:45 +0000 (07:45 +0100)
The output of whether prefer-server-ciphers is supported by OpenSSL
actually always show yes in 1.8, because SSL_OP_CIPHER_SERVER_PREFERENCE
is redefined before the actual check in src/ssl_sock.c, since it was
moved from here from src/haproxy.c.

Since this is not really relevant anymore as we don't support OpenSSL
< 0.9.7 anyway, this change just removes this output.

src/ssl_sock.c

index 62b983aa43565a4e3de69642f7602f245f86775d..3705917a8fd6213f5ad7392813eabd1d22a6a035 100644 (file)
@@ -6794,13 +6794,6 @@ static void __ssl_sock_init(void)
 #endif
               "", ptr);
 
-       memprintf(&ptr, "%s\nOpenSSL library supports prefer-server-ciphers : "
-#ifdef SSL_OP_CIPHER_SERVER_PREFERENCE
-               "yes"
-#else
-               "no (0.9.7 or later needed)"
-#endif
-               "", ptr);
        hap_register_build_opts(ptr, 1);
 
        global.ssl_session_max_cost   = SSL_SESSION_MAX_COST;