Fix SRP authentication ciphersuites.
authorDr. Stephen Henson <steve@openssl.org>
Fri, 8 Aug 2014 10:24:25 +0000 (11:24 +0100)
committerDr. Stephen Henson <steve@openssl.org>
Fri, 8 Aug 2014 23:09:14 +0000 (00:09 +0100)
commit5ed0b6ac0c9226ee539f2f35871c10ee83a80b26
tree8973ecc146383439d7725776229cf40e80f9f5c2
parent90a549ddfbd56970dd88b4bb19fb2046331ed6a6
Fix SRP authentication ciphersuites.

The addition of SRP authentication needs to be checked in various places
to work properly. Specifically:

A certificate is not sent.
A certificate request must not be sent.
Server key exchange message must not contain a signature.
If appropriate SRP authentication ciphersuites should be chosen.
Reviewed-by: Matt Caswell <matt@openssl.org>
(cherry picked from commit 8f5a8805b82d1ae81168b11b7f1506db9e047dec)
ssl/s3_clnt.c
ssl/s3_lib.c
ssl/s3_srvr.c