Blame SOURCES/openssl-1.0.1e-ssl2-no-ec.patch

83c29f
diff -up openssl-1.0.1e/ssl/s23_lib.c.ssl2noec openssl-1.0.1e/ssl/s23_lib.c
83c29f
--- openssl-1.0.1e/ssl/s23_lib.c.ssl2noec	2013-02-11 16:26:04.000000000 +0100
83c29f
+++ openssl-1.0.1e/ssl/s23_lib.c	2014-05-06 15:51:54.053293674 +0200
83c29f
@@ -107,6 +107,13 @@ int ssl23_put_cipher_by_char(const SSL_C
83c29f
 	long l;
83c29f
 
83c29f
 	/* We can write SSLv2 and SSLv3 ciphers */
83c29f
+	/* but no ECC ciphers */
83c29f
+	if (c->algorithm_mkey == SSL_kECDHr ||
83c29f
+		c->algorithm_mkey == SSL_kECDHe ||
83c29f
+		c->algorithm_mkey == SSL_kEECDH ||
83c29f
+		c->algorithm_auth == SSL_aECDH ||
83c29f
+		c->algorithm_auth == SSL_aECDSA)
83c29f
+		return 0;
83c29f
 	if (p != NULL)
83c29f
 		{
83c29f
 		l=c->id;