]> git.ipfire.org Git - thirdparty/openssl.git/commit
Don't complain with "no cipher match" for QUIC objects
authorMatt Caswell <matt@openssl.org>
Wed, 6 Nov 2024 09:53:11 +0000 (09:53 +0000)
committerTomas Mraz <tomas@openssl.org>
Fri, 8 Nov 2024 13:36:17 +0000 (14:36 +0100)
commit40237bf97aeb855856e7b74ed393e1767631e1a2
treeb0c7395d931bc9681d5043d8f397196a21266501
parente54526413d5ef7c665e25f552f2f01d4352bd33d
Don't complain with "no cipher match" for QUIC objects

Calling the functions SSL_CTX_set_cipher_list() or SSL_set_cipher_list() will
return the error "no cipher match" if no TLSv1.2 (or below) ciphers are enabled
after calling them. However this is normal behaviour for QUIC objects which do
not support TLSv1.2 ciphers. Therefore we should suppress that error in this
case.

Fixes #25878

Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/25886)
ssl/ssl_lib.c