mirrors/openssl
0
0
Fork 0
mirror of https://github.com/openssl/openssl.git synced 2024-12-15 21:13:38 +08:00
Code Issues Packages Projects Releases Wiki Activity
f865b08143
openssl/apps
History
Matt Caswell f865b08143 Split configuration of TLSv1.3 ciphers from older ciphers 
With the current mechanism, old cipher strings that used to work in 1.1.0,
may inadvertently disable all TLSv1.3 ciphersuites causing connections to
fail. This is confusing for users.

In reality TLSv1.3 are quite different to older ciphers. They are much
simpler and there are only a small number of them so, arguably, they don't
need the same level of control that the older ciphers have.

This change splits the configuration of TLSv1.3 ciphers from older ones.
By default the TLSv1.3 ciphers are on, so you cannot inadvertently disable
them through your existing config.

Fixes #5359

Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5392)
2018-03-14 10:15:50 +00:00
..
demoSRP Missing SRP files. 2011-03-16 11:50:33 +00:00
app_rand.c Fix use-after-free 2017-07-17 07:46:49 -04:00
apps.c Prepare to detect index changes in OCSP responder. 2018-03-07 11:03:01 -05:00
apps.h Split configuration of TLSv1.3 ciphers from older ciphers 2018-03-14 10:15:50 +00:00
asn1pars.c Update copyright year 2018-02-13 13:59:25 +00:00
bf_prefix.c Fix of prefix bio filter (bf_prefix.c): rely on the given length 2018-02-01 22:09:41 +01:00
build.info Add an apps internal BIO filter for prefixing output lines 2018-02-01 07:10:47 +01:00
ca-cert.srl Update test server certificate in apps/server.pem (it was expired). 2000-10-16 22:56:10 +00:00
ca-key.pem Fix verify(1) to report failure when verification fails 2016-01-13 17:55:17 -05:00
ca-req.pem Fix verify(1) to report failure when verification fails 2016-01-13 17:55:17 -05:00
ca.c do_body: fix heap-use-after-free. 2018-02-21 12:18:56 +00:00
CA.pl.in Make "make variables" config attributes for overridable flags 2018-03-08 17:24:02 +01:00
cert.pem Import of old SSLeay release: SSLeay 0.9.0b 1998-12-21 10:56:39 +00:00
ciphers.c Split configuration of TLSv1.3 ciphers from older ciphers 2018-03-14 10:15:50 +00:00
client.pem Replace expired test server and client certificates with new ones. 2011-12-08 14:44:05 +00:00
cms.c apps: Don't include progs.h in apps.h 2018-01-31 23:45:12 +01:00
crl2p7.c Update copyright year 2018-02-13 13:59:25 +00:00
crl.c Update copyright year 2018-02-13 13:59:25 +00:00
ct_log_list.cnf GH1536: Install empty CT log list 2016-09-14 18:22:33 -04:00
dgst.c Update copyright year 2018-02-13 13:59:25 +00:00
dh1024.pem Update Diffie-Hellman parameters to IANA standards 2016-05-03 10:32:01 -04:00
dh2048.pem Update Diffie-Hellman parameters to IANA standards 2016-05-03 10:32:01 -04:00
dh4096.pem Update Diffie-Hellman parameters to IANA standards 2016-05-03 10:32:01 -04:00
dhparam.c Update copyright year 2018-02-13 13:59:25 +00:00
dsa512.pem Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
dsa1024.pem Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
dsa-ca.pem Fix verify(1) to report failure when verification fails 2016-01-13 17:55:17 -05:00
dsa-pca.pem Fix verify(1) to report failure when verification fails 2016-01-13 17:55:17 -05:00
dsa.c Update copyright year 2018-02-13 13:59:25 +00:00
dsap.pem Import of old SSLeay release: SSLeay 0.9.0b 1998-12-21 10:56:39 +00:00
dsaparam.c Update copyright year 2018-02-13 13:59:25 +00:00
ec.c Update copyright year 2018-02-13 13:59:25 +00:00
ecparam.c Update copyright year 2018-02-13 13:59:25 +00:00
enc.c Add support for PBKDF2 for enc command 2018-02-21 12:36:21 +00:00
engine.c Update copyright year 2018-02-13 13:59:25 +00:00
errstr.c Update copyright year 2018-02-13 13:59:25 +00:00
gendsa.c Update copyright year 2018-02-13 13:59:25 +00:00
genpkey.c Update copyright year 2018-02-13 13:59:25 +00:00
genrsa.c Fix the type of -out option 2018-02-28 18:44:56 +01:00
nseq.c Update copyright year 2018-02-13 13:59:25 +00:00
ocsp.c Make OCSP "multi" compatible with "no-sock" builds. 2018-03-08 17:14:52 -05:00
openssl-vms.cnf Add support for .include directive in config files 2018-03-05 13:32:40 +00:00
openssl.c initialise dc variable to satisfy old compilers. 2018-02-22 13:54:27 -05:00
openssl.cnf Add support for .include directive in config files 2018-03-05 13:32:40 +00:00
opt.c Check on VMS as well 2018-02-28 18:48:04 +01:00
passwd.c Update copyright year 2018-02-13 13:59:25 +00:00
pca-cert.srl Update test server certificate in apps/server.pem (it was expired). 2000-10-16 22:56:10 +00:00
pca-key.pem Fix verify(1) to report failure when verification fails 2016-01-13 17:55:17 -05:00
pca-req.pem Fix verify(1) to report failure when verification fails 2016-01-13 17:55:17 -05:00
pkcs7.c Update copyright year 2018-02-13 13:59:25 +00:00
pkcs8.c Update copyright year 2018-02-13 13:59:25 +00:00
pkcs12.c Update copyright year 2018-02-13 13:59:25 +00:00
pkey.c Update copyright year 2018-02-13 13:59:25 +00:00
pkeyparam.c Update copyright year 2018-02-13 13:59:25 +00:00
pkeyutl.c Update copyright year 2018-02-13 13:59:25 +00:00
prime.c Update copyright year 2018-02-13 13:59:25 +00:00
privkey.pem PR: 1644 2009-09-06 15:49:46 +00:00
progs.pl Copyright update of more files that have changed this year 2018-01-19 13:34:03 +01:00
rand.c Update copyright year 2018-02-13 13:59:25 +00:00
rehash.c openssl rehash: no more need to massage the files on VMS 2018-03-12 23:02:18 +01:00
req.c Update copyright year 2018-02-13 13:59:25 +00:00
req.pem Import of old SSLeay release: SSLeay 0.9.0b 1998-12-21 10:56:39 +00:00
rsa8192.pem Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
rsa.c Update copyright year 2018-02-13 13:59:25 +00:00
rsautl.c Update copyright year 2018-02-13 13:59:25 +00:00
s512-key.pem Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
s512-req.pem Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
s1024key.pem Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
s1024req.pem Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
s_apps.h Introduce SSL_CTX_set_stateless_cookie_{generate,verify}_cb 2018-03-12 19:34:13 +00:00
s_cb.c Introduce SSL_CTX_set_stateless_cookie_{generate,verify}_cb 2018-03-12 19:34:13 +00:00
s_client.c Tolerate TLSv1.3 PSKs that are a different size to the hash size 2018-03-09 11:22:23 +00:00
s_server.c Introduce SSL_CTX_set_stateless_cookie_{generate,verify}_cb 2018-03-12 19:34:13 +00:00
s_socket.c Add BIO_bind function to bind local address for a socket. 2018-02-19 22:58:37 +01:00
s_time.c Update copyright year 2018-02-13 13:59:25 +00:00
server2.pem Replace expired test server and client certificates with new ones. 2011-12-08 14:44:05 +00:00
server.pem Replace expired test server and client certificates with new ones. 2011-12-08 14:44:05 +00:00
server.srl Import of old SSLeay release: SSLeay 0.9.0b 1998-12-21 10:56:39 +00:00
sess_id.c Fix the type of -out option 2018-02-28 18:44:56 +01:00
smime.c Update copyright year 2018-02-13 13:59:25 +00:00
speed.c speed: add ecdhx448 to ecdh choices 2018-03-09 07:15:20 -05:00
spkac.c Update copyright year 2018-02-13 13:59:25 +00:00
srp.c update SRP copyright notice 2018-03-13 18:33:44 +10:00
storeutl.c storeutl: make sure s2i_ASN1_INTEGER is correctly declared 2018-02-28 18:40:08 +01:00
testCA.pem Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
testdsa.h Clean up a bundle of codingstyle stuff in apps directory 2017-06-12 16:11:05 -04:00
testrsa.h Copyright consolidation 01/10 2016-05-17 14:19:19 -04:00
timeouts.h Copyright consolidation 01/10 2016-05-17 14:19:19 -04:00
ts.c Update copyright year 2018-02-13 13:59:25 +00:00
tsget.in Make "make variables" config attributes for overridable flags 2018-03-08 17:24:02 +01:00
verify.c Update copyright year 2018-02-13 13:59:25 +00:00
version.c Restore the display of options with 'openssl version -a' 2018-03-09 14:28:51 +01:00
vms_decc_init.c Copyright consolidation 01/10 2016-05-17 14:19:19 -04:00
vms_term_sock.c Consistent formatting for sizeof(foo) 2017-12-07 19:11:49 -05:00
vms_term_sock.h Cleanup some copyright stuff 2017-06-30 21:56:44 -04:00
win32_init.c Fix not-c code 2016-10-19 00:56:48 +02:00
x509.c Update copyright year 2018-02-13 13:59:25 +00:00