Commit e4731f76 authored by Matt Caswell's avatar Matt Caswell
Browse files

Fix typo setting up certificate masks 



The certificate masks are used to select which ciphersuite we are going to
use. The variables |emask_k| and |emask_a| relate to export grade key
exchange and authentication respecitively. The variables |mask_k| and
|mask_a| are the equivalent versions for non-export grade. This fixes an
instance where the two usages of export/non-export were mixed up. In
practice it makes little difference since it still works!

Reviewed-by: default avatarRichard Levitte <levitte@openssl.org>
(cherry picked from commit fdfe8b06)
parent 595487ea

ssl/ssl_lib.c

+1 −1
Original line number Diff line number Diff line
@@ -2330,7 +2330,7 @@ void ssl_set_cert_masks(CERT *c, const SSL_CIPHER *cipher) 
    if (dh_dsa_export)

        emask_k |= SSL_kDHd;



    if (emask_k & (SSL_kDHr | SSL_kDHd))

    if (mask_k & (SSL_kDHr | SSL_kDHd))

        mask_a |= SSL_aDH;



    if (rsa_enc || rsa_sign) {