]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Add better support for showing TLS 1.3 ciphersuites in --show-tls
authorArne Schwabe <arne@rfc2549.org>
Wed, 10 Oct 2018 15:36:24 +0000 (17:36 +0200)
committerGert Doering <gert@greenie.muc.de>
Thu, 11 Oct 2018 18:41:38 +0000 (20:41 +0200)
commite8467c8648f699b221004a9f15d48b8e558049f0
tree9b34fa0cd5e9e4892401e495a3cb2131529020bd
parent62eb234c810533c7ea13d8a9faa28eebe07f2e82
Add better support for showing TLS 1.3 ciphersuites in --show-tls

--show-tls shows mixed TLS 1.3 and TLS 1.2 ciphers.  The listed ciphers
are only valid in either --tls-cipher or --tls-ciphersuites, but it's
not clear which is which. This is confusing and not really helpful.

This patch modifies show-tls to show separate lists for TLS 1.2 and
TLS 1.3.

Signed-off-by: Arne Schwabe <arne@rfc2549.org>
Acked-by: Steffan Karger <steffan.karger@fox-it.com>
Message-Id: <20181010153624.27957-1-arne@rfc2549.org>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg17723.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
(cherry picked from commit 7aeabadd69fca0071152c42d58fee0b565f01eb3)
src/openvpn/init.c
src/openvpn/ssl.c
src/openvpn/ssl.h
src/openvpn/ssl_backend.h
src/openvpn/ssl_common.h
src/openvpn/ssl_mbedtls.c
src/openvpn/ssl_openssl.c