remove encrypt then mac ifdefs

[openssl.git] / ssl / t1_lib.c

diff --git a/ssl/t1_lib.c b/ssl/t1_lib.c
index 2e0b35ec8b547d7ddffcaaa06184f681b14821c1..8f16668e9d3a87522b034ea18d96b3594a56c858 100644 (file)
--- a/ssl/t1_lib.c
+++ b/ssl/t1_lib.c
@@ -1367,10 +1367,8 @@ unsigned char *ssl_add_clienthello_tlsext(SSL *s, unsigned char *buf,
     /* Add custom TLS Extensions to ClientHello */
     if (!custom_ext_add(s, 0, &ret, limit, al))
         return NULL;
     /* Add custom TLS Extensions to ClientHello */
     if (!custom_ext_add(s, 0, &ret, limit, al))
         return NULL;

-#ifdef TLSEXT_TYPE_encrypt_then_mac

     s2n(TLSEXT_TYPE_encrypt_then_mac, ret);
     s2n(0, ret);
     s2n(TLSEXT_TYPE_encrypt_then_mac, ret);
     s2n(0, ret);

-#endif

 #ifndef OPENSSL_NO_CT
     if (s->ct_validation_callback != NULL) {
         s2n(TLSEXT_TYPE_signed_certificate_timestamp, ret);
 #ifndef OPENSSL_NO_CT
     if (s->ct_validation_callback != NULL) {
         s2n(TLSEXT_TYPE_signed_certificate_timestamp, ret);


@@ -1597,7 +1595,6 @@ unsigned char *ssl_add_serverhello_tlsext(SSL *s, unsigned char *buf,
 #endif
     if (!custom_ext_add(s, 1, &ret, limit, al))
         return NULL;
 #endif
     if (!custom_ext_add(s, 1, &ret, limit, al))
         return NULL;

-#ifdef TLSEXT_TYPE_encrypt_then_mac

     if (s->s3->flags & TLS1_FLAGS_ENCRYPT_THEN_MAC) {
         /*
          * Don't use encrypt_then_mac if AEAD or RC4 might want to disable
     if (s->s3->flags & TLS1_FLAGS_ENCRYPT_THEN_MAC) {
         /*
          * Don't use encrypt_then_mac if AEAD or RC4 might want to disable


@@ -1613,7 +1610,6 @@ unsigned char *ssl_add_serverhello_tlsext(SSL *s, unsigned char *buf,
             s2n(0, ret);
         }
     }
             s2n(0, ret);
         }
     }

-#endif

     if (s->s3->flags & TLS1_FLAGS_RECEIVED_EXTMS) {
         s2n(TLSEXT_TYPE_extended_master_secret, ret);
         s2n(0, ret);
     if (s->s3->flags & TLS1_FLAGS_RECEIVED_EXTMS) {
         s2n(TLSEXT_TYPE_extended_master_secret, ret);
         s2n(0, ret);


@@ -1826,9 +1822,7 @@ static int ssl_scan_clienthello_tlsext(SSL *s, PACKET *pkt, int *al)
     /* Clear any signature algorithms extension received */
     OPENSSL_free(s->s3->tmp.peer_sigalgs);
     s->s3->tmp.peer_sigalgs = NULL;
     /* Clear any signature algorithms extension received */
     OPENSSL_free(s->s3->tmp.peer_sigalgs);
     s->s3->tmp.peer_sigalgs = NULL;

-#ifdef TLSEXT_TYPE_encrypt_then_mac

     s->s3->flags &= ~TLS1_FLAGS_ENCRYPT_THEN_MAC;
     s->s3->flags &= ~TLS1_FLAGS_ENCRYPT_THEN_MAC;

-#endif

 
 #ifndef OPENSSL_NO_SRP
     OPENSSL_free(s->srp_ctx.login);
 
 #ifndef OPENSSL_NO_SRP
     OPENSSL_free(s->srp_ctx.login);


@@ -2165,10 +2159,8 @@ static int ssl_scan_clienthello_tlsext(SSL *s, PACKET *pkt, int *al)
                 return 0;
         }
 #endif
                 return 0;
         }
 #endif

-#ifdef TLSEXT_TYPE_encrypt_then_mac

         else if (type == TLSEXT_TYPE_encrypt_then_mac)
             s->s3->flags |= TLS1_FLAGS_ENCRYPT_THEN_MAC;
         else if (type == TLSEXT_TYPE_encrypt_then_mac)
             s->s3->flags |= TLS1_FLAGS_ENCRYPT_THEN_MAC;

-#endif

         /*
          * Note: extended master secret extension handled in
          * tls_check_serverhello_tlsext_early()
         /*
          * Note: extended master secret extension handled in
          * tls_check_serverhello_tlsext_early()


@@ -2268,9 +2260,7 @@ static int ssl_scan_serverhello_tlsext(SSL *s, PACKET *pkt, int *al)
                              SSL_DTLSEXT_HB_DONT_SEND_REQUESTS);
 #endif
 
                              SSL_DTLSEXT_HB_DONT_SEND_REQUESTS);
 #endif
 

-#ifdef TLSEXT_TYPE_encrypt_then_mac

     s->s3->flags &= ~TLS1_FLAGS_ENCRYPT_THEN_MAC;
     s->s3->flags &= ~TLS1_FLAGS_ENCRYPT_THEN_MAC;

-#endif

 
     s->s3->flags &= ~TLS1_FLAGS_RECEIVED_EXTMS;
 
 
     s->s3->flags &= ~TLS1_FLAGS_RECEIVED_EXTMS;
 


@@ -2482,14 +2472,12 @@ static int ssl_scan_serverhello_tlsext(SSL *s, PACKET *pkt, int *al)
                 return 0;
         }
 #endif
                 return 0;
         }
 #endif

-#ifdef TLSEXT_TYPE_encrypt_then_mac

         else if (type == TLSEXT_TYPE_encrypt_then_mac) {
             /* Ignore if inappropriate ciphersuite */
             if (s->s3->tmp.new_cipher->algorithm_mac != SSL_AEAD
                 && s->s3->tmp.new_cipher->algorithm_enc != SSL_RC4)
                 s->s3->flags |= TLS1_FLAGS_ENCRYPT_THEN_MAC;
         }
         else if (type == TLSEXT_TYPE_encrypt_then_mac) {
             /* Ignore if inappropriate ciphersuite */
             if (s->s3->tmp.new_cipher->algorithm_mac != SSL_AEAD
                 && s->s3->tmp.new_cipher->algorithm_enc != SSL_RC4)
                 s->s3->flags |= TLS1_FLAGS_ENCRYPT_THEN_MAC;
         }

-#endif

         else if (type == TLSEXT_TYPE_extended_master_secret) {
             s->s3->flags |= TLS1_FLAGS_RECEIVED_EXTMS;
             if (!s->hit)
         else if (type == TLSEXT_TYPE_extended_master_secret) {
             s->s3->flags |= TLS1_FLAGS_RECEIVED_EXTMS;
             if (!s->hit)