From 97333eaff7a037cd7087a1ce8f03fbc3a4400732 Mon Sep 17 00:00:00 2001 From: Richard Levitte Date: Fri, 14 Feb 2003 05:24:25 +0000 Subject: [PATCH] Pay attention to disabled SSL versions. PR: 500 --- apps/ocsp.c | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/apps/ocsp.c b/apps/ocsp.c index 6182410f6a..f05ec0e655 100644 --- a/apps/ocsp.c +++ b/apps/ocsp.c @@ -738,7 +738,16 @@ int MAIN(int argc, char **argv) if (use_ssl == 1) { BIO *sbio; +#if !defined(OPENSSL_NO_SSL2) && !defined(OPENSSL_NO_SSL3) ctx = SSL_CTX_new(SSLv23_client_method()); +#elif !defined(OPENSSL_NO_SSL3) + ctx = SSL_CTX_new(SSLv3_client_method()); +#elif !defined(OPENSSL_NO_SSL2) + ctx = SSL_CTX_new(SSLv2_client_method()); +#else + BIO_printf(bio_err, "SSL is disabled\n"); + goto end; +#endif SSL_CTX_set_mode(ctx, SSL_MODE_AUTO_RETRY); sbio = BIO_new_ssl(ctx, 1); cbio = BIO_push(sbio, cbio); -- 2.25.1