Commit fa499246 authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Make GOST ciphersuites require TLSv1 



PR#4141

Reviewed-by: default avatarViktor Dukhovni <viktor@openssl.org>
parent ce24d2ed

ssl/s3_lib.c

+2 −2
Original line number Diff line number Diff line
@@ -1153,7 +1153,7 @@ OPENSSL_GLOBAL const SSL_CIPHER ssl3_ciphers[] = { 
     SSL_aGOST01,

     SSL_eGOST2814789CNT,

     SSL_GOST89MAC,

     SSL_SSLV3,

     SSL_TLSV1,

     SSL_NOT_EXP | SSL_HIGH,

     SSL_HANDSHAKE_MAC_GOST94 | TLS1_PRF_GOST94 | TLS1_STREAM_MAC,

     256,
@@ -1167,7 +1167,7 @@ OPENSSL_GLOBAL const SSL_CIPHER ssl3_ciphers[] = { 
     SSL_aGOST01,

     SSL_eNULL,

     SSL_GOST94,

     SSL_SSLV3,

     SSL_TLSV1,

     SSL_NOT_DEFAULT | SSL_NOT_EXP | SSL_STRONG_NONE,

     SSL_HANDSHAKE_MAC_GOST94 | TLS1_PRF_GOST94,

     0,