Fix compilation with no-ec and/or no-tlsext.
authorRob Stradling <rob@comodo.com>
Tue, 10 Sep 2013 10:45:37 +0000 (11:45 +0100)
committerBen Laurie <ben@links.org>
Mon, 16 Sep 2013 13:03:21 +0000 (14:03 +0100)
ssl/s3_lib.c

index d70286612ca8b444f4b16e0d68a12225b408e7e4..26c0e96aed58796d5cf2fd7f5654ee16871c1316 100644 (file)
@@ -4132,15 +4132,15 @@ SSL_CIPHER *ssl3_choose_cipher(SSL *s, STACK_OF(SSL_CIPHER) *clnt,
                ii=sk_SSL_CIPHER_find(allow,c);
                if (ii >= 0)
                        {
+#if !defined(OPENSSL_NO_EC) && !defined(OPENSSL_NO_TLSEXT)
                        if ((alg_k & SSL_kEECDH) && (alg_a & SSL_aECDSA) && s->s3->is_probably_safari)
                                {
                                if (!ret) ret=sk_SSL_CIPHER_value(allow,ii);
+                               continue;
                                }
-                       else
-                               {
-                               ret=sk_SSL_CIPHER_value(allow,ii);
-                               break;
-                               }
+#endif
+                       ret=sk_SSL_CIPHER_value(allow,ii);
+                       break;
                        }
                }
        return(ret);