diff options
author | tb <> | 2022-02-05 18:34:06 +0000 |
---|---|---|
committer | tb <> | 2022-02-05 18:34:06 +0000 |
commit | 5ca2668e5b3228e2b85bc6198b8c7dce04c22d65 (patch) | |
tree | eee24b1a2e2c9478aa888ab55fde7f93fcb68880 /src/lib/libssl/ssl_lib.c | |
parent | ebd49daf0f01ffb595c4642dd2982bf31d7b9cd3 (diff) | |
download | openbsd-5ca2668e5b3228e2b85bc6198b8c7dce04c22d65.tar.gz openbsd-5ca2668e5b3228e2b85bc6198b8c7dce04c22d65.tar.bz2 openbsd-5ca2668e5b3228e2b85bc6198b8c7dce04c22d65.zip |
Add a workaround due to OpenSSL's limitation of SSL_CTX_set_cipher_list
SSL_CTX_set_cipher_list() in OpenSSL 1.1 does not accept TLSv1.3 ciphers.
This wasn't a problem until now since the AEAD- ciphers were counted as
distinct from TLS_ ciphers by the regress test, so they were never used
in the {run,check}-cipher-${cipher}-client-${clib}-server-${slib} tests
With the renaming, the TLSv1.3 ciphers are now considered as common
ciphers, so they're tested. With openssl11 this results in
0:error:1410D0B9:SSL routines:SSL_CTX_set_cipher_list:no cipher match:ssl/ssl_lib.c:2573:
The design of these tests doesn't allow easily adding a call to
SSL_CTX_set_ciphersuites (since they also need to work with openssl 1.0.2)
so skip the TLS_* ciphers for the time being.
Diffstat (limited to 'src/lib/libssl/ssl_lib.c')
0 files changed, 0 insertions, 0 deletions