Don't allow -www etc options with DTLS.
authorDr. Stephen Henson <steve@openssl.org>
Tue, 15 Jul 2014 11:22:49 +0000 (12:22 +0100)
committerDr. Stephen Henson <steve@openssl.org>
Tue, 15 Jul 2014 11:27:03 +0000 (12:27 +0100)
The options which emulate a web server don't make sense when doing DTLS.
Exit with an error if an attempt is made to use them.

PR#3453
(cherry picked from commit 58a2aaeade8bdecd0f9f0df41927f7cff3012547)

apps/s_server.c

index ef62f017cba5ca9f927cbe6f62907e1bb0509bce..f25f530d60b4784dcbc9bb10e661c084adf0e9a7 100644 (file)
@@ -1215,6 +1215,14 @@ bad:
                sv_usage();
                goto end;
                }
+#ifndef OPENSSL_NO_DTLS1
+       if (www && socket_type == SOCK_DGRAM)
+               {
+               BIO_printf(bio_err,
+                               "Can't use -HTTP, -www or -WWW with DTLS\n");
+               goto end;
+               }
+#endif
 
 #if !defined(OPENSSL_NO_JPAKE) && !defined(OPENSSL_NO_PSK)
        if (jpake_secret)