Only use environment variables if uid and gid are the same as euid and egid.

This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
This commit is contained in:
Richard Levitte 2003-12-27 16:07:20 +00:00
parent de02ec2767
commit f28e8bd300

View file

@ -267,7 +267,8 @@ bad:
goto end;
}
if (cipher == NULL) cipher=getenv("SSL_CIPHER");
if (cipher == NULL && OPENSSL_issetugid() == 0)
cipher=getenv("SSL_CIPHER");
SSL_load_error_strings();
OpenSSL_add_ssl_algorithms();