提交 33564cb7 编写于 作者: M Matt Caswell

Fix comment around safari fingerprint check

Fixes #2442
Reviewed-by: NRichard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/3367)
上级 dea0eb2c
...@@ -1175,6 +1175,7 @@ int dtls_construct_hello_verify_request(SSL *s, WPACKET *pkt) ...@@ -1175,6 +1175,7 @@ int dtls_construct_hello_verify_request(SSL *s, WPACKET *pkt)
* SNI, * SNI,
* elliptic_curves * elliptic_curves
* ec_point_formats * ec_point_formats
* signature_algorithms (for TLSv1.2 only)
* *
* We wish to fingerprint Safari because they broke ECDHE-ECDSA support in 10.8, * We wish to fingerprint Safari because they broke ECDHE-ECDSA support in 10.8,
* but they advertise support. So enabling ECDHE-ECDSA ciphers breaks them. * but they advertise support. So enabling ECDHE-ECDSA ciphers breaks them.
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册