]> git.ipfire.org Git - thirdparty/tor.git/commit
Remove attempt to override TLS 1.3 server ciphersuites
authorNick Mathewson <nickm@torproject.org>
Tue, 6 May 2025 13:01:37 +0000 (09:01 -0400)
committerNick Mathewson <nickm@torproject.org>
Tue, 6 May 2025 14:51:07 +0000 (10:51 -0400)
commit9c80706c488480f07a265238152f69a6aa01b747
tree74abf473ae2d62c0cc0df85255e0cb3d8b805708
parenta30061a8f82ca63ef2b07a41468643eac0d0cd46
Remove attempt to override TLS 1.3 server ciphersuites

This was unnecessary _and_ broken!

It was unnecessary because the default list of TLS 1.3 ciphersuites
has always been pretty reasonable.

It was broken because:
 - SSL_CTX_set_cipher_list only affects the list of TLS 1.2 ciphersuites.
 - There have _never_ been a set of macros  named TLS1_3_TXT_*
   in any openssl version, as far as I can tell.
src/lib/tls/ciphers.inc
src/lib/tls/tortls_openssl.c