diff options
| author |   jsing <jsing@openbsd.org> | 2020-04-19 14:54:14 +0000 |
|---|---|---|
| committer | jsing <jsing@openbsd.org> | 2020-04-19 14:54:14 +0000 |
| commit | 37c0027064b5050f1d87dbca47f76dd5d193105b (patch) | |
| tree | 35a97453f60f1a00e9628f85a0a7dc4021d0b063 /lib/libssl/ssl_ciph.c | |
| parent | Add bcmmbox, a driver for the VideoCore messagebox interface on BCM283X. (diff) | |
| download | wireguard-openbsd-37c0027064b5050f1d87dbca47f76dd5d193105b.tar.xz wireguard-openbsd-37c0027064b5050f1d87dbca47f76dd5d193105b.zip | |
Provide TLSv1.3 cipher suite aliases to match the names used in RFC 8446.
ok beck@ inoguchi@ tb@
Diffstat (limited to 'lib/libssl/ssl_ciph.c')
| -rw-r--r-- | lib/libssl/ssl_ciph.c | 27 |
1 files changed, 25 insertions, 2 deletions
diff --git a/lib/libssl/ssl_ciph.c b/lib/libssl/ssl_ciph.c index 9ba8f404379..37417efc08d 100644 --- a/lib/libssl/ssl_ciph.c +++ b/lib/libssl/ssl_ciph.c @@ -1,4 +1,4 @@ -/* $OpenBSD: ssl_ciph.c,v 1.116 2020/04/18 14:41:05 jsing Exp $ */ +/* $OpenBSD: ssl_ciph.c,v 1.117 2020/04/19 14:54:14 jsing Exp $ */ /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) * All rights reserved. * @@ -396,6 +396,28 @@ static const SSL_CIPHER cipher_aliases[] = { .algorithm_ssl = SSL_TLSV1_3, }, + /* cipher suite aliases */ +#ifdef LIBRESSL_HAS_TLS1_3 + { + .valid = 1, + .name = "TLS_AES_128_GCM_SHA256", + .id = TLS1_3_CK_AES_128_GCM_SHA256, + .algorithm_ssl = SSL_TLSV1_3, + }, + { + .valid = 1, + .name = "TLS_AES_256_GCM_SHA384", + .id = TLS1_3_CK_AES_256_GCM_SHA384, + .algorithm_ssl = SSL_TLSV1_3, + }, + { + .valid = 1, + .name = "TLS_CHACHA20_POLY1305_SHA256", + .id = TLS1_3_CK_CHACHA20_POLY1305_SHA256, + .algorithm_ssl = SSL_TLSV1_3, + }, +#endif + /* strength classes */ { .name = SSL_TXT_LOW, @@ -961,7 +983,8 @@ ssl_cipher_process_rulestr(const char *rule_str, CIPHER_ORDER **head_p, while (((ch >= 'A') && (ch <= 'Z')) || ((ch >= '0') && (ch <= '9')) || ((ch >= 'a') && (ch <= 'z')) || - (ch == '-') || (ch == '.')) { + (ch == '-') || (ch == '.') || + (ch == '_')) { ch = *(++l); buflen++; } |