]> git.ipfire.org Git - thirdparty/openvpn.git/commitdiff
Also update TLSv1_method() calls in support code to SSLv23_method() calls.
authorSteffan Karger <steffan@karger.me>
Wed, 1 Jan 2014 20:10:21 +0000 (21:10 +0100)
committerGert Doering <gert@greenie.muc.de>
Fri, 3 Jan 2014 10:08:09 +0000 (11:08 +0100)
Commit 4b67f98 changed calls to TLSv1_{sever,client}_method() to
SSLv23_{client,server}_method() to enable TLS version negotiation. This
commit does the same for two calls of TLSv1_method() from support code.

Signed-off-by: Steffan Karger <steffan@karger.me>
Acked-by: Gert Doering <gert@greenie.muc.de>
Message-Id: <1388607026-12297-2-git-send-email-steffan@karger.me>
URL: http://article.gmane.org/gmane.network.openvpn.devel/8148
Signed-off-by: Gert Doering <gert@greenie.muc.de>
src/openvpn/ssl_openssl.c

index f41bb711880af740e9bdaa42d4e38bbad46a8f12..2e5d9cd3d783e8dcd2e9ab7f20ee9269f95ade72 100644 (file)
@@ -1282,7 +1282,7 @@ show_available_tls_ciphers ()
   const tls_cipher_name_pair *pair;
   int priority = 0;
 
-  ctx = SSL_CTX_new (TLSv1_method ());
+  ctx = SSL_CTX_new (SSLv23_method ());
   if (!ctx)
     msg (M_SSLERR, "Cannot create SSL_CTX object");
 
@@ -1317,7 +1317,7 @@ get_highest_preference_tls_cipher (char *buf, int size)
   SSL *ssl;
   const char *cipher_name;
 
-  ctx = SSL_CTX_new (TLSv1_method ());
+  ctx = SSL_CTX_new (SSLv23_method ());
   if (!ctx)
     msg (M_SSLERR, "Cannot create SSL_CTX object");
   ssl = SSL_new (ctx);