diff --git a/openssl-equal-latest.patch b/openssl-equal-latest.patch index 160a3d0..f87cfb9 100644 --- a/openssl-equal-latest.patch +++ b/openssl-equal-latest.patch @@ -195,7 +195,7 @@ diff -urN 1/ssl/s3_lib.c 2/ssl/s3_lib.c + + /* not use ECDSA under TLS v1.2 */ + // if ((alg_a & SSL_aECDSA) && s->version != TLS1_2_VERSION) ok = 0; -+ if ((alg_a & SSL_kRSA) && (alg_k & SSL_aRSA) && s->version == TLS1_2_VERSION) ok = 0; ++ if ((alg_a & SSL_aRSA) && (alg_k & SSL_kRSA) && s->version == TLS1_2_VERSION) ok = 0; + #ifndef OPENSSL_NO_PSK /* with PSK there must be server callback set */