Article delegate-en/1031 of [1-5169] on the server localhost:119
  upper oldest olders older1 this newer1 newers latest
search
[Top/Up] [oldest] - [Older+chunk] - [Newer+chunk] - [newest + Check]
[Reference:<_A9892@delegate.ML_>]
Newsgroups: mail-lists.delegate-en

[DeleGate-En] fix to make SSLway go well with both openSSL and SSLeay using 1024bits key
22 Feb 2001 11:39:37 GMT ysato@etl.go.jp (Yutaka Sato)


The enclosed patch will make SSLway/DeleGate go well linked with openSSL
as well as SSLeay, to use 1024bits of public key connected from older
clients like IE4 or NN4.5, without saying "no shared cipher" etc.

Cheers,
Yutaka
--
Yutaka Sato <ysato@delegate.org> http://www.delegate.org/~ysato/   @ @ 
Computer Science Division, Electrotechnical Laboratory            ( - )
1-1-4 Umezono, Tsukuba, Ibaraki, 305-8568 Japan                  _<   >_

diff -cr ../delegate7.1.0/filters/sslway.c ./filters/sslway.c
*** ../delegate7.1.0/filters/sslway.c	Fri Feb  9 14:00:19 2001
--- ./filters/sslway.c	Thu Feb 22 20:41:04 2001
***************
*** 98,104 ****
  #define SSL_VERIFY_PEER			0x01
  #define SSL_VERIFY_FAIL_IF_NO_PEER_CERT	0x02
  #define SSL_VERIFY_CLIENT_ONCE		0x04
- #define SSL_CTRL_SET_TMP_RSA_CB 4
  
  typedef void SSL_CTX;
  typedef void SSL_METHOD;
--- 98,103 ----
***************
*** 912,918 ****
  			SSL_CTX_set_cipher_list(ctx,cipher_list);
  		if( setcerts(ctx,&sv_Cert,0) < 0 )
  			return -1;
! 		SSL_CTX_ctrl(ctx,SSL_CTRL_SET_TMP_RSA_CB,0,tmprsa_callback);
  
  		if( cl_CAfile || cl_CApath )
  			ssl_setCAs(ctx,cl_CAfile,cl_CApath);
--- 911,917 ----
  			SSL_CTX_set_cipher_list(ctx,cipher_list);
  		if( setcerts(ctx,&sv_Cert,0) < 0 )
  			return -1;
! 		SSL_CTX_set_tmp_rsa_callback(ctx,tmprsa_callback);
  
  		if( cl_CAfile || cl_CApath )
  			ssl_setCAs(ctx,cl_CAfile,cl_CApath);
diff -cr ../delegate7.1.0/maker/SSLeay090b.c ./maker/SSLeay090b.c
*** ../delegate7.1.0/maker/SSLeay090b.c	Mon May 17 14:24:54 1999
--- ./maker/SSLeay090b.c	Thu Feb 22 20:45:57 2001
***************
*** 2,4 ****
--- 2,11 ----
  {
  	return SSLeay_add_ssl_algorithms();
  }
+ 
+ #define SSL_CTRL_SET_TMP_RSA_CB 4
+ SSL_CTX_set_tmp_rsa_callback(ctx,tmprsa_callback)
+ 	void (*tmprsa_callback)();
+ {
+ 	SSL_CTX_ctrl(ctx,SSL_CTRL_SET_TMP_RSA_CB,0,tmprsa_callback);
+ }

  admin search upper oldest olders older1 this newer1 newers latest
[Top/Up] [oldest] - [Older+chunk] - [Newer+chunk] - [newest + Check]
@_@V