From e8a0afd4a0156fdc062ab74c1a6e68e8b03b69f4 Mon Sep 17 00:00:00 2001 From: Hakase Date: Sat, 19 May 2018 01:56:18 +0900 Subject: [PATCH] Delete the skip portion. --- ssl/s3_lib.c | 12 ------------ 1 file changed, 12 deletions(-) diff --git a/ssl/s3_lib.c b/ssl/s3_lib.c index 1d1ccfb6..b77bb58e 100644 --- a/ssl/s3_lib.c +++ b/ssl/s3_lib.c @@ -4194,18 +4194,6 @@ const SSL_CIPHER *ssl3_choose_cipher(SSL *s, STACK_OF(SSL_CIPHER) *clnt, alg_k = c->algorithm_mkey; alg_a = c->algorithm_auth; - /* Skip 3DES over TLS v1.0 */ - if (c->algorithm_enc == SSL_3DES && - (s->version != TLS1_VERSION && - s->version != DTLS1_VERSION)) - ok = 0; - - /* not use ECDSA under TLS v1.2 */ - // if ((alg_a & SSL_aECDSA) && s->version != TLS1_2_VERSION) ok = 0; - if ((alg_a & SSL_aRSA) && - (alg_k & SSL_kRSA) && - (s->version != TLS1_VERSION)) ok = 0; - #ifndef OPENSSL_NO_PSK /* with PSK there must be server callback set */ if ((alg_k & SSL_PSK) && s->psk_server_callback == NULL)