CVSROOT: /cvs Module name: src Changes by: js...@cvs.openbsd.org 2014/10/31 08:51:01
Modified files: lib/libssl/src/ssl: d1_srvr.c s3_lib.c s3_srvr.c ssl3.h ssl_cert.c ssl_lib.c ssl_locl.h Log message: Remove support for ephemeral/temporary RSA private keys. The only use for these is via SSL_OP_EPHEMERAL_RSA (which is effectively a standards violation) and for RSA sign-only, should only be possible if you are using an export cipher and have an RSA private key that is more than 512 bits in size (however we no longer support export ciphers). ok bcook@ miod@