From 86af248c43d30c84cf96f9695409e45cf95844bc Mon Sep 17 00:00:00 2001 From: Hakase Date: Sun, 8 Apr 2018 00:51:21 +0900 Subject: [PATCH] new patch --- ssl/s3_lib.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/ssl/s3_lib.c b/ssl/s3_lib.c index 5c242635..35082742 100644 --- a/ssl/s3_lib.c +++ b/ssl/s3_lib.c @@ -4198,10 +4198,10 @@ const SSL_CIPHER *ssl3_choose_cipher(SSL *s, STACK_OF(SSL_CIPHER) *clnt, if (c->algorithm_enc == SSL_3DES && (s->version != TLS1_VERSION && s->version != DTLS1_VERSION)) - continue; + ok = 0; /* not use ECDSA under TLS v1.2 */ // if ((alg_a & SSL_aECDSA) && s->version != TLS1_2_VERSION) continue; - if ((alg_a & SSL_kRSA) && (alg_k & SSL_aRSA) && s->version == TLS1_2_VERSION) continue; + if ((alg_a & SSL_kRSA) && (alg_k & SSL_aRSA) && s->version == TLS1_2_VERSION) ok = 0; #ifndef OPENSSL_NO_PSK /* with PSK there must be server callback set */