diff options
| author | Benjamin Kaduk <bkaduk@akamai.com> | 2018-09-19 09:02:04 -0500 |
|---|---|---|
| committer | Benjamin Kaduk <kaduk@mit.edu> | 2018-09-19 16:44:30 -0500 |
| commit | 2340ed277b7c5365e83a32eb7d5fa32c4071fb21 (patch) | |
| tree | c05589820210b59f41d3916f08f29803267f6170 /crypto/ui/ui_openssl.c | |
| parent | 0db957dbbcf6a432086ab913378c23636d8c374c (diff) | |
Reset TLS 1.3 ciphers in SSL_CTX_set_ssl_version()
Historically SSL_CTX_set_ssl_version() has reset the cipher list
to the default. Splitting TLS 1.3 ciphers to be tracked separately
caused a behavior change, in that TLS 1.3 cipher configuration was
preserved across calls to SSL_CTX_set_ssl_version(). To restore commensurate
behavior with the historical behavior, set the ciphersuites to the default as
well as setting the cipher list to the default.
Closes: #7226
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/7270)
Diffstat (limited to 'crypto/ui/ui_openssl.c')
0 files changed, 0 insertions, 0 deletions