diff options
| author | David Benjamin <davidben@chromium.org> | 2014-08-07 03:56:33 +0400 |
|---|---|---|
| committer | Adam Langley <agl@google.com> | 2014-08-15 02:00:16 +0400 |
| commit | 335d10d201a22598c2b2c379148c9a095b8ab175 (patch) | |
| tree | a429f794df70149086d754025cbb75686b2e74f8 /ssl/ssl_cert.c | |
| parent | 76d8abe7fd11b3f44a6c5ab09760b5957d058d28 (diff) | |
Remove Suite B mode.
It was added in OpenSSL 1.0.2, so nothing can be depending on it yet. If we
really want a Suite B profile, it seems better to generate a configuration for
the rest of the system rather than pepper the codebase with checks.
Change-Id: I1be3ebed0e87cbfe236ade4174dcf5bbc7e10dd5
Reviewed-on: https://boringssl-review.googlesource.com/1517
Reviewed-by: Adam Langley <agl@google.com>
Diffstat (limited to 'ssl/ssl_cert.c')
| -rw-r--r-- | ssl/ssl_cert.c | 4 |
1 files changed, 0 insertions, 4 deletions
diff --git a/ssl/ssl_cert.c b/ssl/ssl_cert.c index 765efe49..1f0ff55f 100644 --- a/ssl/ssl_cert.c +++ b/ssl/ssl_cert.c @@ -658,8 +658,6 @@ int ssl_verify_cert_chain(SSL *s,STACK_OF(X509) *sk) OPENSSL_PUT_ERROR(SSL, ssl_verify_cert_chain, ERR_R_X509_LIB); return(0); } - /* Set suite B flags if needed */ - X509_STORE_CTX_set_flags(&ctx, tls1_suiteb(s)); #if 0 if (SSL_get_verify_depth(s) >= 0) X509_STORE_CTX_set_depth(&ctx, SSL_get_verify_depth(s)); @@ -1149,8 +1147,6 @@ int ssl_build_cert_chain(CERT *c, X509_STORE *chain_store, int flags) OPENSSL_PUT_ERROR(SSL, ssl_build_cert_chain, ERR_R_X509_LIB); goto err; } - /* Set suite B flags if needed */ - X509_STORE_CTX_set_flags(&xs_ctx, c->cert_flags & SSL_CERT_FLAG_SUITEB_128_LOS); i = X509_verify_cert(&xs_ctx); if (i <= 0 && flags & SSL_BUILD_CHAIN_FLAG_IGNORE_ERROR) |