CVSROOT: /cvs
Module name: src
Changes by: d...@cvs.openbsd.org 2015/10/27 01:58:00
Modified files:
usr.sbin/nsd : nsd-control.c remote.c
usr.sbin/unbound/daemon: remote.c
usr.sbin/unbound/smallapp: unbound-control.c
usr.sbin/unbound/util: net_help.c
Log message:
Fix nsd and unbound's error checking with SSL_CTX_set_options().
LibreSSL, BoringSSL and OpenSSL have all been redefining SSL_OP_* flags to
be 0 when support is removed. This breaks the error checking that nsd and
unbound were doing. It should check against the flag value itself to allow
for 0.
input deraadt@, jsing@
tweak + ok miod@, guenther@
