yuzu-emu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2024-11-29 17:04:16 +01:00
Code Issues Packages Projects Releases Wiki Activity

Switch from an enable to a disable flag

Browse Source
This commit is contained in:
Manuel Pégourié-Gonnard 2014-11-04 19:52:10 +01:00
parent 6186019d5d
commit 037170465a
2 changed files with 14 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
include/polarssl/config.h
View File

@ -822,17 +822,22 @@
//#define POLARSSL_SSL_HW_RECORD_ACCEL //#define POLARSSL_SSL_HW_RECORD_ACCEL
/** /**
* \def POLARSSL_SSL_RENEGOTIATION * \def POLARSSL_SSL_DISABLE_RENEGOTIATION
* *
* Enable support for TLS renegotiation. * Disable support for TLS renegotiation.
* *
* The two main uses of renegotiation are (1) refresh keys on long-lived * The two main uses of renegotiation are (1) refresh keys on long-lived
* connections and (2) client authentication after the initial handshake. * connections and (2) client authentication after the initial handshake.
* If you don't need renegotiation, it's probably better to disable it, since * If you don't need renegotiation, it's probably better to disable it, since
* it has been associated with security issues in the past and is easy to * it has been associated with security issues in the past and is easy to
* misuse/misunderstand. * misuse/misunderstand.
*
* Warning: in the next stable branch, this switch will be replaced by
* POLARSSL_SSL_RENEGOTIATION to enable support for renegotiation.
*
* Uncomment this to disable support for renegotiation.
*/ */
#define POLARSSL_SSL_RENEGOTIATION //#define POLARSSL_SSL_DISABLE_RENEGOTIATION
/** /**
* \def POLARSSL_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO * \def POLARSSL_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO

6
include/polarssl/ssl.h
View File

@ -32,6 +32,12 @@
#else #else
#include POLARSSL_CONFIG_FILE #include POLARSSL_CONFIG_FILE
#endif #endif
/* Temporary compatibility trick for the current stable branch */
#if !defined(POLARSSL_SSL_DISABLE_RENEGOTIATION)
#define POLARSSL_SSL_RENEGOTIATION
#endif
#include "net.h" #include "net.h"
#include "bignum.h" #include "bignum.h"
#include "ecp.h" #include "ecp.h"