generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Don't prefer ECDHE-ECDSA ciphers when the client appears to be Safari on OS X.

Browse Source 
OS X 10.8..10.8.3 has broken support for ECDHE-ECDSA ciphers.
This commit is contained in:
Rob Stradling
2013-09-10 12:41:37 +01:00
committed by Ben Laurie
parent ff7b021040
commit cadbbd51c8
5 changed files with 114 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
ssl/ssl.h
View File

@@ -490,7 +490,7 @@ typedef struct ssl_session_st
#define SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG 0x00000008L
#define SSL_OP_SSLREF2_REUSE_CERT_TYPE_BUG 0x00000010L
#define SSL_OP_MICROSOFT_BIG_SSLV3_BUFFER 0x00000020L
#define SSL_OP_MSIE_SSLV2_RSA_PADDING 0x00000040L /* no effect since 0.9.7h and 0.9.8b */
#define SSL_OP_SAFARI_ECDHE_ECDSA_BUG 0x00000040L
#define SSL_OP_SSLEAY_080_CLIENT_DH_BUG 0x00000080L
#define SSL_OP_TLS_D5_BUG 0x00000100L
#define SSL_OP_TLS_BLOCK_PADDING_BUG 0x00000200L