X-Git-Url: https://git.openssl.org/?p=openssl.git;a=blobdiff_plain;f=ssl%2Ft1_lib.c;h=37cc6f6abfe01546371c1b3530606b76ecf8b1d5;hp=c9e489898a4060bb0982a23027f37d7c2fe80d7d;hb=8b8e5bed233a2d8106296c8e460be252719e0fdd;hpb=09599b52d4e295c380512ba39958a11994d63401

diff --git a/ssl/t1_lib.c b/ssl/t1_lib.c
index c9e489898a..37cc6f6abf 100644
--- a/ssl/t1_lib.c
+++ b/ssl/t1_lib.c
@@ -1093,6 +1093,14 @@ void ssl_set_client_disabled(SSL *s)
 	c->valid = 1;
 	}
 
+int ssl_cipher_disabled(SSL *s, const SSL_CIPHER *c)
+	{
+	CERT *ct = s->cert;
+	if (c->algorithm_ssl & ct->mask_ssl || c->algorithm_mkey & ct->mask_k || c->algorithm_auth & ct->mask_a)
+		return 1;
+	return 0;
+	}
+
 unsigned char *ssl_add_clienthello_tlsext(SSL *s, unsigned char *p, unsigned char *limit, int *al)
 	{
 	int extdatalen=0;