[openssl-commits] [openssl] master update

[Matt Caswell]

The branch master has been updated
       via  33564cb7494b0d12384d8ad83207306ebd056e36 (commit)
      from  dea0eb2c5452cd4c2160a64a6868e79efeca6e9d (commit)


- Log -----------------------------------------------------------------
commit 33564cb7494b0d12384d8ad83207306ebd056e36
Author: Matt Caswell <matt at openssl.org>
Date:   Tue May 2 16:26:00 2017 +0100

    Fix comment around safari fingerprint check
    
    Fixes #2442
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/3367)

-----------------------------------------------------------------------

Summary of changes:
 ssl/statem/statem_srvr.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ssl/statem/statem_srvr.c b/ssl/statem/statem_srvr.c
index 9dfdbe5..7adf09b 100644
--- a/ssl/statem/statem_srvr.c
+++ b/ssl/statem/statem_srvr.c
@@ -1175,6 +1175,7 @@ int dtls_construct_hello_verify_request(SSL *s, WPACKET *pkt)
  *   SNI,
  *   elliptic_curves
  *   ec_point_formats
+ *   signature_algorithms (for TLSv1.2 only)
  *
  * We wish to fingerprint Safari because they broke ECDHE-ECDSA support in 10.8,
  * but they advertise support. So enabling ECDHE-ECDSA ciphers breaks them.