From: tedu <tedu@openbsd.org>
Date: Tue, 29 Apr 2014 14:10:07 +0000 (+0000)
Subject: nginx dudes unrolled SSL_OP_ALL by hand so we also have to delete
X-Git-Url: http://artulab.com/gitweb/?a=commitdiff_plain;h=1c71c09da8990c2356151ab51cc3607d9e9089ff;p=openbsd

nginx dudes unrolled SSL_OP_ALL by hand so we also have to delete
SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS from here to benefit. ok miod
---

diff --git a/usr.sbin/nginx/src/event/ngx_event_openssl.c b/usr.sbin/nginx/src/event/ngx_event_openssl.c
index 915e604bbbc..81a1e42d81c 100644
--- a/usr.sbin/nginx/src/event/ngx_event_openssl.c
+++ b/usr.sbin/nginx/src/event/ngx_event_openssl.c
@@ -192,8 +192,6 @@ ngx_ssl_create(ngx_ssl_t *ssl, ngx_uint_t protocols, void *data)
     SSL_CTX_set_options(ssl->ctx, SSL_OP_TLS_D5_BUG);
     SSL_CTX_set_options(ssl->ctx, SSL_OP_TLS_BLOCK_PADDING_BUG);
 
-    SSL_CTX_set_options(ssl->ctx, SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS);
-
     SSL_CTX_set_options(ssl->ctx, SSL_OP_SINGLE_DH_USE);
 
     if (!(protocols & NGX_SSL_SSLv2)) {