diff options
author | jkim <jkim@FreeBSD.org> | 2016-03-04 00:40:15 +0000 |
---|---|---|
committer | jkim <jkim@FreeBSD.org> | 2016-03-04 00:40:15 +0000 |
commit | 86f5b30ace5c71d6d7ced267579015122d0165cd (patch) | |
tree | 6b303f77e9e0621af7fd9d7fb9def646ff4264ad /secure/lib/libcrypto/opensslconf-sparc64.h | |
parent | a80787b3cf391d64d553b56692582daf4b07b78f (diff) | |
download | FreeBSD-src-86f5b30ace5c71d6d7ced267579015122d0165cd.zip FreeBSD-src-86f5b30ace5c71d6d7ced267579015122d0165cd.tar.gz |
Re-enable SSLv2 support to restore ABI.
Excerpt from CHANGES:
Even if "enable-ssl2" is used, users who want to negotiate SSLv2 via
the version-flexible SSLv23_method() will need to explicitly call
either of:
SSL_CTX_clear_options(ctx, SSL_OP_NO_SSLv2);
or
SSL_clear_options(ssl, SSL_OP_NO_SSLv2);
as appropriate. Even if either of those is used, or the application
explicitly uses the version-specific SSLv2_method() or its client and
server variants, SSLv2 ciphers vulnerable to exhaustive search key
recovery have been removed. Specifically, the SSLv2 40-bit EXPORT
ciphers, and SSLv2 56-bit DES are no longer available.
Approved by: re (marius, gjb), so (delphij)
Diffstat (limited to 'secure/lib/libcrypto/opensslconf-sparc64.h')
-rw-r--r-- | secure/lib/libcrypto/opensslconf-sparc64.h | 6 |
1 files changed, 0 insertions, 6 deletions
diff --git a/secure/lib/libcrypto/opensslconf-sparc64.h b/secure/lib/libcrypto/opensslconf-sparc64.h index b1faf75..2bd0b2c 100644 --- a/secure/lib/libcrypto/opensslconf-sparc64.h +++ b/secure/lib/libcrypto/opensslconf-sparc64.h @@ -27,9 +27,6 @@ extern "C" { #ifndef OPENSSL_NO_SCTP # define OPENSSL_NO_SCTP #endif -#ifndef OPENSSL_NO_SSL2 -# define OPENSSL_NO_SSL2 -#endif #ifndef OPENSSL_NO_STORE # define OPENSSL_NO_STORE #endif @@ -75,9 +72,6 @@ extern "C" { # if defined(OPENSSL_NO_SCTP) && !defined(NO_SCTP) # define NO_SCTP # endif -# if defined(OPENSSL_NO_SSL2) && !defined(NO_SSL2) -# define NO_SSL2 -# endif # if defined(OPENSSL_NO_STORE) && !defined(NO_STORE) # define NO_STORE # endif |