]> git.ipfire.org Git - thirdparty/hostap.git/commit
BoringSSL: Map OpenSSL SUITEB192 cipher into appropriate sigalgs
authorJouni Malinen <jouni@codeaurora.org>
Mon, 19 Feb 2018 14:25:54 +0000 (16:25 +0200)
committerJouni Malinen <j@w1.fi>
Mon, 19 Feb 2018 14:27:05 +0000 (16:27 +0200)
commitaa6de8e6b649766ed8dc60eedba3b6aa4f0c2d11
treef914596fae23ffde71fc0257813d9647072bb857
parent7a47f34b1a871459bc97b84b9550facbb9165fe2
BoringSSL: Map OpenSSL SUITEB192 cipher into appropriate sigalgs

BoringSSL removed the special OpenSSL cipher suite value "SUITEB192", so
need to map that to the explicit ciphersuite
(ECDHE-ECDSA-AES256-GCM-SHA384), curve (P-384), and sigalg
(SSL_SIGN_ECDSA_SECP384R1_SHA384) to allow 192-bit level Suite B with
ECDSA to be used.

This commit takes care of the sigalg configuration using the relatively
recent SSL_CTX_set_verify_algorithm_prefs() addition from April 2017.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
src/crypto/tls_openssl.c