commit 1a9f2c7245e795e98b595acfae921fc6e5fcdb66
author Manuel Pégourié-Gonnard <mpg@elzevir.fr> Sat Nov 30 18:30:06 2013 +0100
committer Manuel Pégourié-Gonnard <mpg@elzevir.fr> Sat Nov 30 18:30:06 2013 +0100
tree 1e01582963f7e321362fd696bbf44e06eb4f2ca9
parent 011a8db2e705f382241f9ee734eed1d87764bc34

Add option to respect client ciphersuite order

library/ssl_srv.c

diff --git a/library/ssl_srv.c b/library/ssl_srv.c
index 0d6df13..0c6c0d7 100644
--- a/library/ssl_srv.c
+++ b/library/ssl_srv.c
@@ -975,9 +975,15 @@
 
     ciphersuites = ssl->ciphersuite_list[ssl->minor_ver];
     ciphersuite_info = NULL;
+#if defined(POLARSSL_SSL_SRV_RESPECT_CLIENT_PREFERENCE)
+    for( j = 0, p = buf + 6; j < ciph_len; j += 3, p += 3 )
+    {
+        for( i = 0; ciphersuites[i] != 0; i++ )
+#else
     for( i = 0; ciphersuites[i] != 0; i++ )
     {
         for( j = 0, p = buf + 6; j < ciph_len; j += 3, p += 3 )
+#endif
         {
             if( p[0] != 0 ||
                 p[1] != ( ( ciphersuites[i] >> 8 ) & 0xFF ) ||
@@ -1424,9 +1430,15 @@
      */
     ciphersuites = ssl->ciphersuite_list[ssl->minor_ver];
     ciphersuite_info = NULL;
+#if defined(POLARSSL_SSL_SRV_RESPECT_CLIENT_PREFERENCE)
+    for( j = 0, p = buf + 41 + sess_len; j < ciph_len; j += 2, p += 2 )
+    {
+        for( i = 0; ciphersuites[i] != 0; i++ )
+#else
     for( i = 0; ciphersuites[i] != 0; i++ )
     {
         for( j = 0, p = buf + 41 + sess_len; j < ciph_len; j += 2, p += 2 )
+#endif
         {
             if( p[0] != ( ( ciphersuites[i] >> 8 ) & 0xFF ) ||
                 p[1] != ( ( ciphersuites[i]      ) & 0xFF ) )