Переглянути джерело

Detect the correct versions of openssl for tls negotiation fix

Since it doesn't seem to hurt, we should use _both_ fixes whenever
we see OpenSSL 0.9.7L .. 0.9.8, or OpenSSL 0.9.8L..
Nick Mathewson 16 роки тому
батько
коміт
4905eaa38c
1 змінених файлів з 4 додано та 4 видалено
  1. 4 4
      src/common/tortls.c

+ 4 - 4
src/common/tortls.c

@@ -358,13 +358,13 @@ tor_tls_init(void)
     version = SSLeay();
     if (version >= 0x009070c0L && version < 0x00908000L) {
       log_notice(LD_GENERAL, "OpenSSL %s looks like version 0.9.7l or later; "
-                 "I will use SSL3_FLAGS to enable renegotation",
+                 "I will try SSL3_FLAGS and SSL3_OP to enable renegotation",
                  SSLeay_version(SSLEAY_VERSION));
       use_unsafe_renegotiation_flag = 1;
       use_unsafe_renegotiation_op = 1;
-    } else if (version >= 0x009080d0L) {
-      log_notice(LD_GENERAL, "OpenSSL %s looks like version 0.9.8m or later; "
-                 "I will use SSL_OP to enable renegotiation",
+    } else if (version >= 0x009080c0L) {
+      log_notice(LD_GENERAL, "OpenSSL %s looks like version 0.9.8l or later; "
+                 "I will try SSL3_FLAGS and SSL_OP to enable renegotiation",
                  SSLeay_version(SSLEAY_VERSION));
       use_unsafe_renegotiation_flag = 1;
       use_unsafe_renegotiation_op = 1;