From: Amos Jeffries <squid3@treenet.co.nz>
Date: Wed, 4 May 2011 07:19:55 +0000 (+1200)
Subject: Support OpenSSL 1.0.0 built without SSLv2
X-Git-Tag: take07~16^2~36
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=50b4c08095b86061c9b86a8b0fb8a7fbc2062a6d;p=thirdparty%2Fsquid.git

Support OpenSSL 1.0.0 built without SSLv2
---

diff --git a/src/ssl/support.cc b/src/ssl/support.cc
index 55cf01bb1a..7e3995e067 100644
--- a/src/ssl/support.cc
+++ b/src/ssl/support.cc
@@ -652,8 +652,13 @@ sslCreateServerContext(const char *certfile, const char *keyfile, int version, c
     switch (version) {
 
     case 2:
+#ifndef OPENSSL_NO_SSL2
         debugs(83, 5, "Using SSLv2.");
         method = SSLv2_server_method();
+#else
+        debugs(83, 1, "SSLv2 is not available in this Proxy.");
+        return NULL;
+#endif
         break;
 
     case 3:
@@ -850,8 +855,13 @@ sslCreateClientContext(const char *certfile, const char *keyfile, int version, c
     switch (version) {
 
     case 2:
+#ifndef OPENSSL_NO_SSL2
         debugs(83, 5, "Using SSLv2.");
         method = SSLv2_client_method();
+#else
+        debugs(83, 1, "SSLv2 is not available in this Proxy.");
+        return NULL;
+#endif
         break;
 
     case 3: