This is an automated email from the ASF dual-hosted git repository.

markt pushed a commit to branch 1.3.x
in repository https://gitbox.apache.org/repos/asf/tomcat-native.git


The following commit(s) were added to refs/heads/1.3.x by this push:
     new 547a5c89e Fix logic error in TLS 1.3 cipher configuration
547a5c89e is described below

commit 547a5c89e2ff9f4780ab5bebc46fc94598982eba
Author: Mark Thomas <[email protected]>
AuthorDate: Wed Jan 7 17:50:33 2026 +0000

    Fix logic error in TLS 1.3 cipher configuration
---
 native/src/sslcontext.c           |  2 +-
 xdocs/miscellaneous/changelog.xml | 10 +++++++++-
 2 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/native/src/sslcontext.c b/native/src/sslcontext.c
index 5ad137193..e703a53aa 100644
--- a/native/src/sslcontext.c
+++ b/native/src/sslcontext.c
@@ -586,7 +586,7 @@ TCN_IMPLEMENT_CALL(jboolean, SSLContext, 
setCipherSuitesEx)(TCN_STDARGS, jlong c
         goto free_cipherSuites;
     }
 
-    if (SSL_CTX_set_ciphersuites(c->ctx, J2S(cipherSuites))) {
+    if (!SSL_CTX_set_ciphersuites(c->ctx, J2S(cipherSuites))) {
         char err[TCN_OPENSSL_ERROR_STRING_LENGTH];
         ERR_error_string_n(SSL_ERR_get(), err, 
TCN_OPENSSL_ERROR_STRING_LENGTH);
         tcn_Throw(e, "Unable to configure permitted SSL cipher suites (%s)", 
err);
diff --git a/xdocs/miscellaneous/changelog.xml 
b/xdocs/miscellaneous/changelog.xml
index 2c2647673..7fe8153d1 100644
--- a/xdocs/miscellaneous/changelog.xml
+++ b/xdocs/miscellaneous/changelog.xml
@@ -31,7 +31,15 @@
   started from the 1.2.39 tag.
   </p>
 </section>
-<section name="Changes in 1.3.3">
+<section name="Changes in 1.3.4">
+  <changelog>
+    <fix>
+      Correct logic error that prevented the configuration of TLS 1.3 cipher
+      suites. (markt)
+    </fix>
+  </changelog>
+</section>
+<section name="Changes in 1.3.3 (not released)">
   <changelog>
     <fix>
       Refactor the addition of TLS 1.3 cipher suite configuration to avoid a


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to