]> www.infradead.org Git - users/dwmw2/openconnect.git/commit
OpenSSL: Loop over DTLS ciphersuites looking for the one we asked for.
authorDavid Woodhouse <dwmw2@infradead.org>
Wed, 9 Jan 2019 12:02:57 +0000 (12:02 +0000)
committerDavid Woodhouse <dwmw2@infradead.org>
Wed, 9 Jan 2019 12:06:30 +0000 (12:06 +0000)
commit6526aa640a7d6897778cd4ea68d5a61524ebeae0
treec0d860a239e494944ba01a60cd678064437116a3
parent78fd058b08cef9cdb48f159b8abe9f448a78804f
OpenSSL: Loop over DTLS ciphersuites looking for the one we asked for.

As of OpenSSL 1.1.1, the trick of using SSL_CTX_set_cipher_list() and then
expecting only the one ciphersuite to be present in what we get back from
SSL_get_ciphers(), is no longer working. It now always returns the TLSv1.3
ciphers, even though we don't have DTLSv1.3 yet.

Reported as https://github.com/openssl/openssl/issues/8004 but probably
not going to change; the most likely outcome there is that I'm told that
I'm Doing It Wrong™ and a different approach is suggested.

In the meantime, just loop over the results and pick the one that we
actually asked for.

Signed-off-by: David Woodhouse <dwmw2@infradead.org>
openssl-dtls.c