Commit f56c5b20 authored by Deomid Ryabkov's avatar Deomid Ryabkov Committed by Marko Mikulicic

Do not set cipher list if PFS is disabled

Remove Krypton TODO: SSL{,_CTX}_set_cipher_list have been added
(but these ciphers are not supported).

Fixes cesanta/dev#2975

PUBLISHED_FROM=25bf330b785f0a61e18ba409069ebccbd50dcf65
parent 077b9eb7
...@@ -2585,8 +2585,7 @@ const char *mg_set_ssl(struct mg_connection *nc, const char *cert, ...@@ -2585,8 +2585,7 @@ const char *mg_set_ssl(struct mg_connection *nc, const char *cert,
SSL_set_fd(nc->ssl, nc->sock); SSL_set_fd(nc->ssl, nc->sock);
} }
/* TODO(rojer): remove when krypton exposes this function, even a dummy one */ #ifndef MG_DISABLE_PFS
#ifdef OPENSSL_VERSION_NUMBER
SSL_CTX_set_cipher_list(nc->ssl_ctx, mg_s_cipher_list); SSL_CTX_set_cipher_list(nc->ssl_ctx, mg_s_cipher_list);
#endif #endif
return result; return result;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment