openssl-CAN-2005-2969.patch

   1 --- ssl/s23_srvr.c      25 Sep 2002 15:36:09 -0000      1.32.2.5
   2 +++ ssl/s23_srvr.c      11 Oct 2005 00:00:00 -0000
   3 @@ -575,9 +575,7 @@
   4                         }
   5
   6                 s->state=SSL2_ST_GET_CLIENT_HELLO_A;
   7 -               if ((s->options & SSL_OP_MSIE_SSLV2_RSA_PADDING) ||
   8 -                       use_sslv2_strong ||
   9 -                       (s->options & SSL_OP_NO_TLSv1 && s->options & SSL_OP_NO_SSLv3))
  10 +               if (s->options & SSL_OP_NO_TLSv1 && s->options & SSL_OP_NO_SSLv3)
  11                         s->s2->ssl2_rollback=0;
  12                 else
  13                         /* reject SSL 2.0 session if client supports SSL 3.0 or TLS 1.0