diff options
| author | Kurt Roeckx <kurt@roeckx.be> | 2014-11-29 16:17:54 +0100 |
|---|---|---|
| committer | Kurt Roeckx <kurt@roeckx.be> | 2014-12-02 11:28:42 +0100 |
| commit | e9f47de1f009b523635c0f4dc083e6acb3e56a71 (patch) | |
| tree | 1de86628658a3ff3faddb7594375c270a7a9cfb6 /apps | |
| parent | 6a7a4a4e19a339889e8238b6b23b5d3c010a0361 (diff) | |
Use the SSLv23 method by default
If SSLv2 and SSLv3 are both disabled we still support SSL/TLS.
Reviewed-by: Richard Levitte <levitte@openssl.org>
Diffstat (limited to 'apps')
| -rw-r--r-- | apps/ocsp.c | 9 | ||||
| -rw-r--r-- | apps/s_time.c | 6 |
2 files changed, 0 insertions, 15 deletions
diff --git a/apps/ocsp.c b/apps/ocsp.c index 156fe32199..1a3d1a3980 100644 --- a/apps/ocsp.c +++ b/apps/ocsp.c @@ -1448,16 +1448,7 @@ OCSP_RESPONSE *process_responder(BIO *err, OCSP_REQUEST *req, if (use_ssl == 1) { BIO *sbio; -#if !defined(OPENSSL_NO_SSL2) && !defined(OPENSSL_NO_SSL3) ctx = SSL_CTX_new(SSLv23_client_method()); -#elif !defined(OPENSSL_NO_SSL3) - ctx = SSL_CTX_new(SSLv3_client_method()); -#elif !defined(OPENSSL_NO_SSL2) - ctx = SSL_CTX_new(SSLv2_client_method()); -#else - BIO_printf(err, "SSL is disabled\n"); - goto end; -#endif if (ctx == NULL) { BIO_printf(err, "Error creating SSL context.\n"); diff --git a/apps/s_time.c b/apps/s_time.c index b823c33c58..81dad53243 100644 --- a/apps/s_time.c +++ b/apps/s_time.c @@ -349,13 +349,7 @@ int MAIN(int argc, char **argv) if (bio_err == NULL) bio_err=BIO_new_fp(stderr,BIO_NOCLOSE); -#if !defined(OPENSSL_NO_SSL2) && !defined(OPENSSL_NO_SSL3) s_time_meth=SSLv23_client_method(); -#elif !defined(OPENSSL_NO_SSL3) - s_time_meth=SSLv3_client_method(); -#elif !defined(OPENSSL_NO_SSL2) - s_time_meth=SSLv2_client_method(); -#endif /* parse the command line arguments */ if( parseArgs( argc, argv ) < 0 ) |