CVSROOT: /cvs Module name: src Changes by: d...@cvs.openbsd.org 2015/10/27 01:58:00
Modified files: usr.sbin/nsd : nsd-control.c remote.c usr.sbin/unbound/daemon: remote.c usr.sbin/unbound/smallapp: unbound-control.c usr.sbin/unbound/util: net_help.c Log message: Fix nsd and unbound's error checking with SSL_CTX_set_options(). LibreSSL, BoringSSL and OpenSSL have all been redefining SSL_OP_* flags to be 0 when support is removed. This breaks the error checking that nsd and unbound were doing. It should check against the flag value itself to allow for 0. input deraadt@, jsing@ tweak + ok miod@, guenther@