From 50c8054d10ba7a56b1b11cea6f98d6496ac4ac71 Mon Sep 17 00:00:00 2001
From: Peter Wu <peter@lekensteyn.nl>
Date: Sat, 17 Sep 2016 18:34:52 +0200
Subject: openssl-{connect,listen}: OpenSSL 1.1.0 compat

The options parser has changed, options now have to precede the
parameters (possible a bug, already reported to rt.openssl.org with
subject "Options after parameters are ignored in OpenSSL 1.1.0").

While at it, use COMPLEMENTOFALL instead of NULL since that possibly
includes more ciphers.
---
 openssl-connect | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'openssl-connect')

diff --git a/openssl-connect b/openssl-connect
index 77ba857..f4def7f 100755
--- a/openssl-connect
+++ b/openssl-connect
@@ -79,7 +79,7 @@ s_client_client_random() {
 # When stdin is a TTY, try all ciphers
 if [ -t 0 ]; then
     # Use only SSLv3 and TLSv1 ciphers, do not use SSLv2
-    openssl ciphers -V -tls1 ALL:NULL
+    openssl ciphers -V -tls1 ALL:COMPLEMENTOFALL
 else
     # otherwise if not TTY, pass-through (useful for grep)
     cat
-- 
cgit v1.2.1