diff options
| author | Ralf S. Engelschall <rse@openssl.org> | 1999-02-25 11:03:18 +0000 |
|---|---|---|
| committer | Ralf S. Engelschall <rse@openssl.org> | 1999-02-25 11:03:18 +0000 |
| commit | 90a52cecafb0f3280905df9121491fba6cbf30a6 (patch) | |
| tree | 59c5919af3df86847a1e88421b8d94eee1b1201e /ssl | |
| parent | def9f43151ef301237bb6b549af02b124d89a50a (diff) | |
Fix the cipher decision scheme for export ciphers: the export bits are *not*
within SSL_MKEY_MASK or SSL_AUTH_MASK, they are within SSL_EXP_MASK. So, the
original variable has to be used instead of the already masked variable.
Submitted by: Richard Levitte <levitte@stacken.kth.se>
Reviewed by: Ralf S. Engelschall
Diffstat (limited to 'ssl')
| -rw-r--r-- | ssl/s3_lib.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/ssl/s3_lib.c b/ssl/s3_lib.c index b7bcf86476..1dd03b1265 100644 --- a/ssl/s3_lib.c +++ b/ssl/s3_lib.c @@ -771,11 +771,11 @@ STACK *have,*pref; emask=cert->export_mask; alg=c->algorithms&(SSL_MKEY_MASK|SSL_AUTH_MASK); - if (SSL_IS_EXPORT(alg)) + if (SSL_IS_EXPORT(c->algorithms)) { ok=((alg & emask) == alg)?1:0; #ifdef CIPHER_DEBUG - printf("%d:[%08lX:%08lX]%s\n",ok,alg,mask,c->name); + printf("%d:[%08lX:%08lX]%s (export)\n",ok,alg,mask,c->name); #endif } else |