#46 Handle openssl 1.1.1a TLS 1.3 cipher suite separation
Opened 5 years ago by rcritten. Modified 5 years ago

From CHANGES:

 Separated TLSv1.3 ciphersuite configuration out from TLSv1.2 ciphersuite
 configuration. TLSv1.3 ciphersuites are not compatible with TLSv1.2 and
 below. Similarly TLSv1.2 ciphersuites are not compatible with TLSv1.3.
 In order to avoid issues where legacy TLSv1.2 ciphersuite configuration
 would otherwise inadvertently disable all TLSv1.3 ciphersuites the
 configuration has been separated out. See the ciphers man page or the
 SSL_CTX_set_ciphersuites() man page for more information.

This change is causing a lot of test failures because the TLS 1.2 and 1.3 ciphersuites are very much intermingled.

It is unclear whether this is limited to minor tweaking of the tests or if module code changes will be required as well.


Metadata Update from @rcritten:
- Custom field type adjusted to None
- Issue assigned to rcritten
- Issue set to the milestone: mod_nss-1.0.19

5 years ago

Login to comment on this ticket.

Metadata