Fix tls_global_version_check() function and message
authorAlan T. DeKok <aland@freeradius.org>
Thu, 22 Sep 2016 15:59:08 +0000 (11:59 -0400)
committerAlan T. DeKok <aland@freeradius.org>
Thu, 22 Sep 2016 15:59:08 +0000 (11:59 -0400)
there is now more than one vulnerability in OpenSSL.

src/main/tls.c

index 6919a7c..33ce683 100644 (file)
@@ -2456,15 +2456,14 @@ int tls_global_version_check(char const *acknowledged)
                        ERROR("Security advisory %s (%s)", defect->id, defect->name);
                        ERROR("%s", defect->comment);
 
+                       INFO("Once you have verified libssl has been correctly patched, "
+                            "set security.allow_vulnerable_openssl = '%s'", defect->id);
+
                        bad = true;
                }
        }
 
-       if (bad) {
-               INFO("Once you have verified libssl has been correctly patched, "
-                    "set security.allow_vulnerable_openssl = '%s'", libssl_defects[0].id);
-               return -1;
-       }
+       if (bad) return -1;
 
        return 0;
 }