diff --git a/ssl/s3_lib.c b/ssl/s3_lib.c index d13bb8d7..8373a784 100644 --- a/ssl/s3_lib.c +++ b/ssl/s3_lib.c @@ -4199,12 +4199,6 @@ const SSL_CIPHER *ssl3_choose_cipher(SSL *s, STACK_OF(SSL_CIPHER) *clnt, (s->version != TLS1_VERSION && s->version != DTLS1_VERSION)) ok = 0; - /* not use ECDSA under TLS v1.2 */ - // if ((alg_a & SSL_aECDSA) && s->version != TLS1_2_VERSION) continue; - if ((alg_a & SSL_aRSA) && - (alg_k & SSL_kRSA) && - (c->algorithm_mac != SSL_AEAD) && - s->version == TLS1_2_VERSION) ok = 0; #ifndef OPENSSL_NO_PSK /* with PSK there must be server callback set */