upstream/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2025-12-20 23:00:56 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

Set openssl security level to 0 when using aNULL ciphers

Browse source 
git-svn-id: file:///svn/unbound/trunk@3919 be551aaa-1e26-0410-a405-d3ace91eadb9
This commit is contained in:
Ralph Dolmans 2016-11-03 16:59:00 +00:00
parent c22f958152
commit 589eabc0cb
3 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
daemon/remote.c
View file

@ -243,6 +243,9 @@ daemon_remote_create(struct config_file* cfg)
if (cfg->remote_control_use_cert == 0) { if (cfg->remote_control_use_cert == 0) {
/* No certificates are requested */ /* No certificates are requested */
#if OPENSSL_VERSION_NUMBER >= 0x10100000 && !defined(HAVE_LIBRESSL)
SSL_CTX_set_security_level(rc->ctx, 0);
#endif
if(!SSL_CTX_set_cipher_list(rc->ctx, "aNULL")) { if(!SSL_CTX_set_cipher_list(rc->ctx, "aNULL")) {
log_crypto_err("Failed to set aNULL cipher list"); log_crypto_err("Failed to set aNULL cipher list");
daemon_remote_delete(rc); daemon_remote_delete(rc);

3
doc/Changelog
View file

@ -1,3 +1,6 @@
3 November 2016: Ralph
- Set OpenSSL security level to 0 when using aNULL ciphers.
3 November 2016: Wouter 3 November 2016: Wouter
- .gitattributes line for githubs code language display. - .gitattributes line for githubs code language display.
- log-identity: config option to set sys log identity, patch from - log-identity: config option to set sys log identity, patch from

3
smallapp/unbound-control.c
View file

@ -176,6 +176,9 @@ setup_ctx(struct config_file* cfg)
free(c_cert); free(c_cert);
} else { } else {
/* Use ciphers that don't require authentication */ /* Use ciphers that don't require authentication */
#if OPENSSL_VERSION_NUMBER >= 0x10100000 && !defined(HAVE_LIBRESSL)
SSL_CTX_set_security_level(ctx, 0);
#endif
if(!SSL_CTX_set_cipher_list(ctx, "aNULL")) if(!SSL_CTX_set_cipher_list(ctx, "aNULL"))
ssl_err("Error setting NULL cipher!"); ssl_err("Error setting NULL cipher!");
} }