Move MAC computations for Finished from ssl3_read_bytes into
ssl3_get_message, which is more logical (and avoids a bug,
in addition to the one that I introduced yesterday :-)
and makes Microsoft "fast SGC" less special.
MS SGC should still work now without an extra state of its own
(it goes directly to SSL3_ST_SR_CLNT_HELLO_C, which is the usual state
for reading the body of a Client Hello message), however this should
be tested to make sure, and I don't have a MS SGC client.
diff --git a/Configure b/Configure
index 7ac8a6e..38fb9e9 100755
--- a/Configure
+++ b/Configure
@@ -422,7 +422,7 @@
{
$no_asm=1;
$flags .= "-DNO_ASM ";
- $openssl_algorithm_defines .= "#define NO_ASM\n";
+ $openssl_other_defines .= "#define NO_ASM\n";
}
elsif (/^no-threads$/)
{ $no_threads=1; }