]> git.ipfire.org Git - thirdparty/openvpn.git/commitdiff
Also update TLSv1_method() calls in support code to SSLv23_method() calls.
authorSteffan Karger <steffan@karger.me>
Wed, 1 Jan 2014 20:10:21 +0000 (21:10 +0100)
committerGert Doering <gert@greenie.muc.de>
Fri, 3 Jan 2014 10:08:55 +0000 (11:08 +0100)
Commit 4b67f98 changed calls to TLSv1_{sever,client}_method() to
SSLv23_{client,server}_method() to enable TLS version negotiation. This
commit does the same for two calls of TLSv1_method() from support code.

Signed-off-by: Steffan Karger <steffan@karger.me>
Acked-by: Gert Doering <gert@greenie.muc.de>
Message-Id: <1388607026-12297-2-git-send-email-steffan@karger.me>
URL: http://article.gmane.org/gmane.network.openvpn.devel/8148
Signed-off-by: Gert Doering <gert@greenie.muc.de>
(cherry picked from commit dd3e319c1d66c7da51b8555d745a1139e0b322f2)

src/openvpn/ssl_openssl.c

index db7fd06da890558ab0ad6a1392bf60a98827b911..8fc830a3146b39f76abc201eae3a00852dd18d7b 100644 (file)
@@ -1293,7 +1293,7 @@ show_available_tls_ciphers ()
   const tls_cipher_name_pair *pair;
   int priority = 0;
 
-  ctx = SSL_CTX_new (TLSv1_method ());
+  ctx = SSL_CTX_new (SSLv23_method ());
   if (!ctx)
     msg (M_SSLERR, "Cannot create SSL_CTX object");
 
@@ -1328,7 +1328,7 @@ get_highest_preference_tls_cipher (char *buf, int size)
   SSL *ssl;
   const char *cipher_name;
 
-  ctx = SSL_CTX_new (TLSv1_method ());
+  ctx = SSL_CTX_new (SSLv23_method ());
   if (!ctx)
     msg (M_SSLERR, "Cannot create SSL_CTX object");
   ssl = SSL_new (ctx);