From: Dr. Stephen Henson <steve@openssl.org>
Date: Tue, 15 Jul 2014 11:22:49 +0000 (+0100)
Subject: Don't allow -www etc options with DTLS.
X-Git-Tag: OpenSSL_0_9_8zb~23
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=a214feb26bb94ed1fd20d2526ce33d806a8378f0;p=oweals%2Fopenssl.git

Don't allow -www etc options with DTLS.

The options which emulate a web server don't make sense when doing DTLS.
Exit with an error if an attempt is made to use them.

PR#3453
(cherry picked from commit 58a2aaeade8bdecd0f9f0df41927f7cff3012547)
---

diff --git a/apps/s_server.c b/apps/s_server.c
index 045c2bdd75..fe33b41f65 100644
--- a/apps/s_server.c
+++ b/apps/s_server.c
@@ -1095,6 +1095,14 @@ bad:
 		sv_usage();
 		goto end;
 		}
+#ifndef OPENSSL_NO_DTLS1
+	if (www && socket_type == SOCK_DGRAM)
+		{
+		BIO_printf(bio_err,
+				"Can't use -HTTP, -www or -WWW with DTLS\n");
+		goto end;
+		}
+#endif
 
 	SSL_load_error_strings();
 	OpenSSL_add_ssl_algorithms();