Fix incorrect substitution that happened during the recent ciphersuite

selection remodeling

Submitted by: Victor Duchovni

diff --git a/ssl/ssl_lib.c b/ssl/ssl_lib.c
index 6e5d1b7f46632197bc11c4362bcf892991fac62b..d73c7ca080be98e81eb5d94e1879a64d48ad91d8 100644 (file)
--- a/ssl/ssl_lib.c
+++ b/ssl/ssl_lib.c
@@ -1946,7 +1946,7 @@ X509 *ssl_get_server_send_cert(SSL *s)
        alg_k = s->s3->tmp.new_cipher->algorithm_mkey;
        alg_a = s->s3->tmp.new_cipher->algorithm_auth;
 
-       if (alg_k & (SSL_kEECDH|SSL_kECDHr|SSL_kECDHe))
+       if (alg_k & (SSL_kECDHr|SSL_kECDHe))
                {
                /* we don't need to look at SSL_kEECDH
                 * since no certificate is needed for