Commit 33564cb7 authored by Matt Caswell's avatar Matt Caswell
Browse files

Fix comment around safari fingerprint check 



Fixes #2442

Reviewed-by: default avatarRichard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/3367)
parent dea0eb2c

ssl/statem/statem_srvr.c

+1 −0
Original line number Diff line number Diff line
@@ -1175,6 +1175,7 @@ int dtls_construct_hello_verify_request(SSL *s, WPACKET *pkt) 
 *   SNI,

 *   elliptic_curves

 *   ec_point_formats

 *   signature_algorithms (for TLSv1.2 only)

 *

 * We wish to fingerprint Safari because they broke ECDHE-ECDSA support in 10.8,

 * but they advertise support. So enabling ECDHE-ECDSA ciphers breaks them.