summaryrefslogtreecommitdiff
path: root/src/lib/libssl/tls13_legacy.c
diff options
context:
space:
mode:
authortb <>2022-02-05 18:34:06 +0000
committertb <>2022-02-05 18:34:06 +0000
commit5ca2668e5b3228e2b85bc6198b8c7dce04c22d65 (patch)
treeeee24b1a2e2c9478aa888ab55fde7f93fcb68880 /src/lib/libssl/tls13_legacy.c
parentebd49daf0f01ffb595c4642dd2982bf31d7b9cd3 (diff)
downloadopenbsd-5ca2668e5b3228e2b85bc6198b8c7dce04c22d65.tar.gz
openbsd-5ca2668e5b3228e2b85bc6198b8c7dce04c22d65.tar.bz2
openbsd-5ca2668e5b3228e2b85bc6198b8c7dce04c22d65.zip
Add a workaround due to OpenSSL's limitation of SSL_CTX_set_cipher_list
SSL_CTX_set_cipher_list() in OpenSSL 1.1 does not accept TLSv1.3 ciphers. This wasn't a problem until now since the AEAD- ciphers were counted as distinct from TLS_ ciphers by the regress test, so they were never used in the {run,check}-cipher-${cipher}-client-${clib}-server-${slib} tests With the renaming, the TLSv1.3 ciphers are now considered as common ciphers, so they're tested. With openssl11 this results in 0:error:1410D0B9:SSL routines:SSL_CTX_set_cipher_list:no cipher match:ssl/ssl_lib.c:2573: The design of these tests doesn't allow easily adding a call to SSL_CTX_set_ciphersuites (since they also need to work with openssl 1.0.2) so skip the TLS_* ciphers for the time being.
Diffstat (limited to 'src/lib/libssl/tls13_legacy.c')
0 files changed, 0 insertions, 0 deletions