Do not set cipher list if PFS is disabled

Remove Krypton TODO: SSL{,_CTX}_set_cipher_list have been added
(but these ciphers are not supported).

Fixes cesanta/dev#2975

PUBLISHED_FROM=25bf330b785f0a61e18ba409069ebccbd50dcf65
This commit is contained in:
Deomid Ryabkov 2016-03-14 17:36:06 +01:00 committed by Marko Mikulicic
parent 077b9eb7a4
commit f56c5b201d

View File

@ -2585,8 +2585,7 @@ const char *mg_set_ssl(struct mg_connection *nc, const char *cert,
SSL_set_fd(nc->ssl, nc->sock);
}
/* TODO(rojer): remove when krypton exposes this function, even a dummy one */
#ifdef OPENSSL_VERSION_NUMBER
#ifndef MG_DISABLE_PFS
SSL_CTX_set_cipher_list(nc->ssl_ctx, mg_s_cipher_list);
#endif
return result;