Support for fixed DH ciphersuites.

[openssl.git] / ssl / ssl_lib.c

diff --git a/ssl/ssl_lib.c b/ssl/ssl_lib.c
index 906fcd44117e018774f7a88c2258c5e85339eba3..9f29f3e10b1fa2b7cc965c669997420c1f414067 100644 (file)
--- a/ssl/ssl_lib.c
+++ b/ssl/ssl_lib.c
@@ -2110,6 +2110,9 @@ void ssl_set_cert_masks(CERT *c, const SSL_CIPHER *cipher)
        if (dh_dsa) mask_k|=SSL_kDHd;
        if (dh_dsa_export) emask_k|=SSL_kDHd;
 
        if (dh_dsa) mask_k|=SSL_kDHd;
        if (dh_dsa_export) emask_k|=SSL_kDHd;
 

+       if (emask_k & (SSL_kDHr|SSL_kDHd))
+               mask_a |= SSL_aDH;
+

        if (rsa_enc || rsa_sign)
                {
                mask_a|=SSL_aRSA;
        if (rsa_enc || rsa_sign)
                {
                mask_a|=SSL_aRSA;