Re: [PATCH] ssl: ability to set TLS 1.3 ciphers using ssl-default-server-ciphersuites

2019-03-22 Thread Willy Tarreau
On Fri, Mar 22, 2019 at 11:26:31AM +0100, Emeric Brun wrote: > Hi Pierre, > > On 3/21/19 5:15 PM, Pierre Cheynier wrote: > > Any attempt to put TLS 1.3 ciphers on servers failed with output 'unable > > to set TLS 1.3 cipher suites'. > > > > This was due to usage of SSL_CTX_set_cipher_list instead

Re: [PATCH] ssl: ability to set TLS 1.3 ciphers using ssl-default-server-ciphersuites

2019-03-22 Thread Emeric Brun
Hi Pierre, On 3/21/19 5:15 PM, Pierre Cheynier wrote: > Any attempt to put TLS 1.3 ciphers on servers failed with output 'unable > to set TLS 1.3 cipher suites'. > > This was due to usage of SSL_CTX_set_cipher_list instead of > SSL_CTX_set_ciphersuites in the TLS 1.3 block (protected by > OPENSSL

[PATCH] ssl: ability to set TLS 1.3 ciphers using ssl-default-server-ciphersuites

2019-03-21 Thread Pierre Cheynier
Any attempt to put TLS 1.3 ciphers on servers failed with output 'unable to set TLS 1.3 cipher suites'. This was due to usage of SSL_CTX_set_cipher_list instead of SSL_CTX_set_ciphersuites in the TLS 1.3 block (protected by OPENSSL_VERSION_NUMBER >= 0x10101000L & so). Signed-off-by: Pierre Cheyni