diff options
| author | David Woodhouse <David.Woodhouse@intel.com> | 2016-07-25 18:03:27 +0100 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2016-08-04 20:56:24 +0100 |
| commit | 032924c4b4104654ff8659b4701e4ab25872a12e (patch) | |
| tree | a7b5757cae6a997fe0fbbbfce6117c4bcd41b0a7 /ssl/ssl_locl.h | |
| parent | 387cf21345f981d3897f88a6479d8e60721c2c6b (diff) | |
| download | openssl-032924c4b4104654ff8659b4701e4ab25872a12e.zip openssl-032924c4b4104654ff8659b4701e4ab25872a12e.tar.gz openssl-032924c4b4104654ff8659b4701e4ab25872a12e.tar.bz2 | |
Make DTLS1_BAD_VER work with DTLS_client_method()
DTLSv1_client_method() is deprecated, but it was the only way to obtain
DTLS1_BAD_VER support. The SSL_OP_CISCO_ANYCONNECT hack doesn't work with
DTLS_client_method(), and it's relatively non-trivial to make it work without
expanding the hack into lots of places.
So deprecate SSL_OP_CISCO_ANYCONNECT with DTLSv1_client_method(), and make
it work with SSL_CTX_set_{min,max}_proto_version(DTLS1_BAD_VER) instead.
Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Diffstat (limited to 'ssl/ssl_locl.h')
| -rw-r--r-- | ssl/ssl_locl.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/ssl/ssl_locl.h b/ssl/ssl_locl.h index 550c4d5..ef05f70 100644 --- a/ssl/ssl_locl.h +++ b/ssl/ssl_locl.h @@ -1655,6 +1655,7 @@ __owur const SSL_METHOD *tlsv1_2_client_method(void); __owur const SSL_METHOD *dtlsv1_method(void); __owur const SSL_METHOD *dtlsv1_server_method(void); __owur const SSL_METHOD *dtlsv1_client_method(void); +__owur const SSL_METHOD *dtls_bad_ver_client_method(void); __owur const SSL_METHOD *dtlsv1_2_method(void); __owur const SSL_METHOD *dtlsv1_2_server_method(void); __owur const SSL_METHOD *dtlsv1_2_client_method(void); |