From cbd64894ec687c6f37d8e43c16dff78e63f6be87 Mon Sep 17 00:00:00 2001 From: "Dr. Stephen Henson" Date: Wed, 13 Mar 2013 15:33:24 +0000 Subject: Use enc_flags when deciding protocol variations. Use the enc_flags field to determine whether we should use explicit IV, signature algorithms or SHA256 default PRF instead of hard coding which versions support each requirement. --- ssl/t1_trce.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'ssl/t1_trce.c') diff --git a/ssl/t1_trce.c b/ssl/t1_trce.c index e766095a63..e471272b5d 100644 --- a/ssl/t1_trce.c +++ b/ssl/t1_trce.c @@ -531,7 +531,7 @@ static int ssl_print_signature(BIO *bio, int indent, SSL *s, { if (*pmsglen < 2) return 0; - if (TLS1_get_version(s) >= TLS1_2_VERSION) + if (SSL_USE_SIGALGS(s)) { const unsigned char *p = *pmsg; BIO_indent(bio, indent, 80); @@ -1046,7 +1046,7 @@ static int ssl_print_cert_request(BIO *bio, int indent, SSL *s, return 0; msg += xlen; msglen -= xlen + 1; - if (TLS1_get_version(s) < TLS1_2_VERSION) + if (!SSL_USE_SIGALGS(s)) goto skip_sig; if (msglen < 2) return 0; -- cgit v1.2.3