]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MEDIUM: ssl: add support for ciphersuites option for TLSv1.3
authorDirkjan Bussink <d.bussink@gmail.com>
Fri, 14 Sep 2018 09:14:21 +0000 (11:14 +0200)
committerWilly Tarreau <w@1wt.eu>
Mon, 8 Oct 2018 17:20:13 +0000 (19:20 +0200)
commit415150f7640b06740fa832363d186c5c6565338e
treef2f682f6edcb4110586e2a6a7b667b2e9eee8e4a
parent363c745569b6ffd8f095d2b7758131d08aa27219
MEDIUM: ssl: add support for ciphersuites option for TLSv1.3

OpenSSL released support for TLSv1.3. It also added a separate function
SSL_CTX_set_ciphersuites that is used to set the ciphers used in the
TLS 1.3 handshake. This change adds support for that new configuration
option by adding a ciphersuites configuration variable that works
essentially the same as the existing ciphers setting.

Note that it should likely be backported to 1.8 in order to ease usage
of the now released openssl-1.1.1.
doc/configuration.txt
include/common/defaults.h
include/types/listener.h
include/types/server.h
src/server.c
src/ssl_sock.c