]> git.ipfire.org Git - thirdparty/chrony.git/commit
projects / thirdparty / chrony.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 42fbf41) | patch
nts: don't include compliant-128gcm record for other AEADs
authorMiroslav Lichvar <mlichvar@redhat.com>
Tue, 8 Oct 2024 09:49:55 +0000 (11:49 +0200)
committerMiroslav Lichvar <mlichvar@redhat.com>
Tue, 8 Oct 2024 10:11:05 +0000 (12:11 +0200)
commitb8b166044fe5faa7773cf6470e71c726465794c1
treefe285bd9865460fa140b1f4cbad524fe5f54b415tree
parent42fbf4168612a5e320e5e7b03013d2f5425ea285commit | diff
nts: don't include compliant-128gcm record for other AEADs

If the client included the NTS-KE record requesting compliant key
exporter context for AES-128-GCM-SIV, but the server doesn't select this
AEAD algorithm (it's not supported by the crypto library or it is
disabled by the ntsaeads directive), don't include the NTS-KE record in
the response. It's not relevant to the other AEAD algorithms.
nts_ke_server.c diff | blob | blame | history
Mirror of https://git.tuxfamily.org/chrony/chrony.git