1
0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-24 04:09:07 +03:00
Files
wolfssl/scripts
Daniel Pouzzner d5af5eb34f src/internal.c:
In ParseCipherList(), accept the whole-string cipher list "ALL:eNULL" in builds
without OPENSSL_EXTRA/OPENSSL_ALL, passing SUITES_NULL_EXPLICIT as the haveNull
arg to InitSuites(), so that the RFC 9150 integrity-only TLS 1.3 suites, and the
legacy NULL suites, are included, matching the semantics of the eNULL keyword in
keyword-capable builds.

Previously these builds rejected the list outright; in scripts/openssl.test this
was masked by the example server's -x flag, silently leaving the server on the
default suite list, which included the NULL suites until PR #10594 removed them.
Default suite lists are unaffected: every default-list path still passes
haveNull=1, which the WOLFSSL_TLS13_NULL_CIPHER_IN_DEFAULT gate rejects, and in
OPENSSL_EXTRA/OPENSSL_ALL builds the new match arm is compiled out, so the only
behavioral change anywhere is that a previously-failing
wolfSSL_CTX_set_cipher_list("ALL:eNULL") call now succeeds.

scripts/openssl.test: remove stray debugging echo.
2026-09-20 23:35:04 -05:00
..
2026-09-03 20:59:54 +10:00
2026-09-03 20:59:54 +10:00
2026-09-03 20:59:54 +10:00
2026-09-03 20:59:54 +10:00
2026-05-14 13:10:13 +02:00
2026-09-03 20:59:54 +10:00
2026-09-03 20:59:54 +10:00
2026-09-03 20:59:54 +10:00
2026-09-20 23:35:04 -05:00
2026-09-03 20:59:54 +10:00
2026-07-23 21:51:26 -07:00
2026-07-08 09:33:47 +10:00