BUILD: ssl: Do not use SSL3_MT_KEY_UPDATE, hardcode 24 instead

Not every SSL lib provides SSL3_MT_KEY_UPDATE, so just hardcode 24
instead.
This should be backported up to 2.8, when
91004114fe8816f848025fe71def4ea23e72a5f6 will be backported.

diff --git a/src/ssl_sock.c b/src/ssl_sock.c
index bba0e8bdbcc8aee8c42c813cf82c7176c3275388..c1bf5740087132dcb3a334a47f8ed55f2014d8a0 100644 (file)
--- a/src/ssl_sock.c
+++ b/src/ssl_sock.c
@@ -2243,7 +2243,7 @@ static void ssl_sock_keyupdate_ratelimit(int write_p, int version,
        /* only count KeyUpdate messages received from the peer */
        if (write_p || content_type != SSL3_RT_HANDSHAKE)
                return;
-       if (len < 1 || ((const unsigned char *)buf)[0] != SSL3_MT_KEY_UPDATE)
+       if (len < 1 || ((const unsigned char *)buf)[0] != 24 /* SSL3_MT_KEY_UPDATE */)
                return;
 
        conn = ssl_sock_get_conn(ssl, &ctx);