From: Jonathan Bastien-Filiatrault <joe@x2a.org>
Date: Sun, 2 Aug 2009 23:00:08 +0000 (-0400)
Subject: dtls: Remove unsuitable ciphers.
X-Git-Tag: gnutls_2_99_0~250
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=81291c9df97455bba09fd606afd47bd0299b124c;p=thirdparty%2Fgnutls.git

dtls: Remove unsuitable ciphers.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
---

diff --git a/lib/gnutls_handshake.c b/lib/gnutls_handshake.c
index e1f1a5560d..b48e5e7607 100644
--- a/lib/gnutls_handshake.c
+++ b/lib/gnutls_handshake.c
@@ -3324,6 +3324,7 @@ _gnutls_remove_unwanted_ciphersuites (gnutls_session_t session,
   int newSuiteSize = 0, i;
   gnutls_certificate_credentials_t cert_cred;
   gnutls_kx_algorithm_t kx;
+  gnutls_cipher_algorithm_t cid;
   int server = session->security_parameters.entity == GNUTLS_SERVER ? 1 : 0;
   gnutls_kx_algorithm_t *alg = NULL;
   int alg_size = 0;
@@ -3408,6 +3409,15 @@ _gnutls_remove_unwanted_ciphersuites (gnutls_session_t session,
             delete = 1;
         }
 
+      /* if dtls and not appropriate for dtls */
+      if(_gnutls_is_dtls(session))
+	{
+	  cid = _gnutls_cipher_suite_get_cipher_algo (&(*cipherSuites)[i]);
+
+	  if(cid == GNUTLS_CIPHER_ARCFOUR_128 || cid == GNUTLS_CIPHER_ARCFOUR_40)
+	    delete = 1;
+	}
+
       memcpy (&cs.suite, &(*cipherSuites)[i].suite, 2);
 
       if (delete == 0)