generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Add compilation flag to disable certain protocol checks and allow use of

Browse Source 
some invalid operations for testing purposes. Currently this can be used
to sign using digests the peer doesn't support, EC curves the peer
doesn't support and use certificates which don't match the type associated
with a ciphersuite.
This commit is contained in:
Dr. Stephen Henson
2012-08-29 13:18:34 +00:00
parent 81f57e5a69
commit ed83ba5321
5 changed files with 70 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
ssl/ssl.h
View File

@@ -663,7 +663,8 @@ struct ssl_session_st
/* Suite B 128 bit mode allowing 192 bit algorithms */
#define SSL_CERT_FLAG_SUITEB_128_LOS 0x30000
/* Perform all sorts of protocol violations for testing purposes */
#define SSL_CERT_FLAG_BROKEN_PROTCOL 0x10000000
/* Flags for building certificate chains */
/* Treat any existing certificates as untrusted CAs */