Commit 0436369f authored by Tomas Mraz's avatar Tomas Mraz Committed by Dr. Stephen Henson
Browse files

Don't advertise ECC ciphersuits in SSLv2 compatible client hello. 

PR#3374
parent 0535c2d6

ssl/s23_lib.c

+7 −0
Original line number Diff line number Diff line
@@ -107,6 +107,13 @@ int ssl23_put_cipher_by_char(const SSL_CIPHER *c, unsigned char *p) 
	long l;



	/* We can write SSLv2 and SSLv3 ciphers */

	/* but no ECC ciphers */

	if (c->algorithm_mkey == SSL_kECDHr ||

		c->algorithm_mkey == SSL_kECDHe ||

		c->algorithm_mkey == SSL_kEECDH ||

		c->algorithm_auth == SSL_aECDH ||

		c->algorithm_auth == SSL_aECDSA)

		return 0;

	if (p != NULL)

		{

		l=c->id;