Do not set cipher list if PFS is disabled

Remove Krypton TODO: SSL{,_CTX}_set_cipher_list have been added
(but these ciphers are not supported).

Fixes cesanta/dev#2975

PUBLISHED_FROM=25bf330b785f0a61e18ba409069ebccbd50dcf65
This commit is contained in:
Deomid Ryabkov 2016-03-14 17:36:06 +01:00 committed by Marko Mikulicic
parent 077b9eb7a4
commit f56c5b201d

View File

@ -2585,8 +2585,7 @@ const char *mg_set_ssl(struct mg_connection *nc, const char *cert,
SSL_set_fd(nc->ssl, nc->sock); SSL_set_fd(nc->ssl, nc->sock);
} }
/* TODO(rojer): remove when krypton exposes this function, even a dummy one */ #ifndef MG_DISABLE_PFS
#ifdef OPENSSL_VERSION_NUMBER
SSL_CTX_set_cipher_list(nc->ssl_ctx, mg_s_cipher_list); SSL_CTX_set_cipher_list(nc->ssl_ctx, mg_s_cipher_list);
#endif #endif
return result; return result;