]> git.ipfire.org Git - thirdparty/strongswan.git/commit
tls-crypto: Filter TLS cipher suites by min/max version
authorTobias Brunner <tobias@strongswan.org>
Tue, 25 Aug 2020 11:54:08 +0000 (13:54 +0200)
committerTobias Brunner <tobias@strongswan.org>
Fri, 12 Feb 2021 10:45:44 +0000 (11:45 +0100)
commit281766c5e6604a2d6c7885a4769bd67838f99d37
tree7c5e6a15ad577288ec0e2cf1d0f23901dbb0d5a5
parent436571b2f049d45c00d974e51a12d397eb28bf53
tls-crypto: Filter TLS cipher suites by min/max version

There is no point proposing legacy (or future) cipher suites depending on
the proposed TLS versions. It was actually possible to negotiate and use
cipher suites only defined for TLS 1.2 with earlier TLS versions.
src/libtls/tests/suites/test_socket.c
src/libtls/tls_crypto.c
src/libtls/tls_crypto.h