SSLv2 compat ciphers: clarify comment

Reviewed-by: Matt Caswell <matt@openssl.org>
This commit is contained in:
Emilia Kasper 2015-10-06 17:27:35 +02:00
parent e58c4d3cdd
commit 20218b58b5

View File

@ -3494,10 +3494,9 @@ STACK_OF(SSL_CIPHER) *ssl_bytes_to_cipher_list(SSL *s,
while (PACKET_copy_bytes(cipher_suites, cipher, n)) { while (PACKET_copy_bytes(cipher_suites, cipher, n)) {
/* /*
* We only support SSLv2 format ciphers in SSLv3+ using a * SSLv3 ciphers wrapped in an SSLv2-compatible ClientHello have the
* SSLv2 backward compatible ClientHello. In this case the first * first byte set to zero, while true SSLv2 ciphers have a non-zero
* byte is always 0 for SSLv3 compatible ciphers. Anything else * first byte. We don't support any true SSLv2 ciphers, so skip them.
* is an SSLv2 cipher and we ignore it
*/ */
if (sslv2format && cipher[0] != '\0') if (sslv2format && cipher[0] != '\0')
continue; continue;