]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Add better support for showing TLS 1.3 ciphersuites in --show-tls
authorArne Schwabe <arne@rfc2549.org>
Wed, 10 Oct 2018 15:36:24 +0000 (17:36 +0200)
committerGert Doering <gert@greenie.muc.de>
Thu, 11 Oct 2018 18:34:45 +0000 (20:34 +0200)
commit7aeabadd69fca0071152c42d58fee0b565f01eb3
tree3b9998b14c3d1b2f79aec5affbfa9ef94a938a58
parented31cf2ab718d879615dea81e6a17d26537ab43a
Add better support for showing TLS 1.3 ciphersuites in --show-tls

--show-tls shows mixed TLS 1.3 and TLS 1.2 ciphers.  The listed ciphers
are only valid in either --tls-cipher or --tls-ciphersuites, but it's
not clear which is which. This is confusing and not really helpful.

This patch modifies show-tls to show separate lists for TLS 1.2 and
TLS 1.3.

Signed-off-by: Arne Schwabe <arne@rfc2549.org>
Acked-by: Steffan Karger <steffan.karger@fox-it.com>
Message-Id: <20181010153624.27957-1-arne@rfc2549.org>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg17723.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
src/openvpn/init.c
src/openvpn/ssl.c
src/openvpn/ssl.h
src/openvpn/ssl_backend.h
src/openvpn/ssl_common.h
src/openvpn/ssl_mbedtls.c
src/openvpn/ssl_openssl.c