From: Tim Strobell (Contractor) <tim.strobell.ctr@nrl.navy.mil>
Date: Mon, 4 Jun 2012 21:50:23 +0000 (-0400)
Subject: ITS#7285 Mozilla NSS: default cipher suite always selected
X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=2c2bb2e7aee1b2167f383a8344985a1cf66aff3f;p=openldap

ITS#7285 Mozilla NSS: default cipher suite always selected
---

diff --git a/libraries/libldap/tls_m.c b/libraries/libldap/tls_m.c
index 23d843c0ec..b608551e4d 100644
--- a/libraries/libldap/tls_m.c
+++ b/libraries/libldap/tls_m.c
@@ -2218,12 +2218,13 @@ tlsm_deferred_ctx_init( void *arg )
 		return -1;
 	}
 
- 	if ( lt->lt_ciphersuite &&
-	     tlsm_parse_ciphers( ctx, lt->lt_ciphersuite )) {
- 		Debug( LDAP_DEBUG_ANY,
-		       "TLS: could not set cipher list %s.\n",
-		       lt->lt_ciphersuite, 0, 0 );
-		return -1;
+	if ( lt->lt_ciphersuite ) {
+		if ( tlsm_parse_ciphers( ctx, lt->lt_ciphersuite ) ) {
+			Debug( LDAP_DEBUG_ANY,
+			       "TLS: could not set cipher list %s.\n",
+			       lt->lt_ciphersuite, 0, 0 );
+			return -1;
+		}
 	} else if ( tlsm_parse_ciphers( ctx, "DEFAULT" ) ) {
  		Debug( LDAP_DEBUG_ANY,
 		       "TLS: could not set cipher list DEFAULT.\n",