diff options
| author | Matt Caswell <matt@openssl.org> | 2015-05-15 11:49:56 +0200 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2015-05-23 00:10:51 +0200 |
| commit | e481f9b90b164fd1053015d1c4e0a0d92076d7a8 (patch) | |
| tree | 2dbf5d699977893b677a18b213f31c61b59d468b /Configure | |
| parent | RT266: Add HTTP proxy/CONNECT to s_client (diff) | |
| download | openssl-e481f9b90b164fd1053015d1c4e0a0d92076d7a8.tar.xz openssl-e481f9b90b164fd1053015d1c4e0a0d92076d7a8.zip | |
Remove support for OPENSSL_NO_TLSEXT
Given the pervasive nature of TLS extensions it is inadvisable to run
OpenSSL without support for them. It also means that maintaining
the OPENSSL_NO_TLSEXT option within the code is very invasive (and probably
not well tested). Therefore it is being removed.
Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
Diffstat (limited to 'Configure')
| -rwxr-xr-x | Configure | 10 |
1 files changed, 0 insertions, 10 deletions
@@ -1086,10 +1086,6 @@ if (defined($disabled{"md5"}) || defined($disabled{"sha"}) $disabled{"tls1"} = "forced"; } -if (defined($disabled{"tls1"})) - { - $disabled{"tlsext"} = "forced"; - } if (defined($disabled{"ec"}) || defined($disabled{"dsa"}) || defined($disabled{"dh"})) @@ -1097,12 +1093,6 @@ if (defined($disabled{"ec"}) || defined($disabled{"dsa"}) $disabled{"gost"} = "forced"; } -# SRP and HEARTBEATS require TLSEXT -if (defined($disabled{"tlsext"})) - { - $disabled{"srp"} = "forced"; - $disabled{"heartbeats"} = "forced"; - } if ($target eq "TABLE") { foreach $target (sort keys %table) { |