Re: [openssl-users] was the change in when disabled ciphers are skipped intentional?

2018-11-23 Thread Sam Roberts
On Fri, Nov 23, 2018 at 11:41 AM Viktor Dukhovni wrote: > > On Nov 23, 2018, at 2:25 PM, Sam Roberts wrote: > > > > In 1.1.0j, if SSL_CTX_set_cipher_list() is called with "not-a-cipher" > > or "rc4", then SSL_R_NO_CIPHER_MATCH will occur. > > > > In 1.1.1a, set_cipher_list() suceeds, seems to

Re: [openssl-users] was the change in when disabled ciphers are skipped intentional?

2018-11-23 Thread Viktor Dukhovni
> On Nov 23, 2018, at 2:25 PM, Sam Roberts wrote: > > In 1.1.0j, if SSL_CTX_set_cipher_list() is called with "not-a-cipher" > or "rc4", then SSL_R_NO_CIPHER_MATCH will occur. > > In 1.1.1a, set_cipher_list() suceeds, seems to return the complete > cipher list (should it do this?) but later

[openssl-users] was the change in when disabled ciphers are skipped intentional?

2018-11-23 Thread Sam Roberts
In 1.1.0j, if SSL_CTX_set_cipher_list() is called with "not-a-cipher" or "rc4", then SSL_R_NO_CIPHER_MATCH will occur. In 1.1.1a, set_cipher_list() suceeds, seems to return the complete cipher list (should it do this?) but later ssl_cipher_list_to_bytes() will find that ssl_cipher_disabled() is