openssl/util/perl
Matt Caswell f865b08143 Split configuration of TLSv1.3 ciphers from older ciphers
With the current mechanism, old cipher strings that used to work in 1.1.0,
may inadvertently disable all TLSv1.3 ciphersuites causing connections to
fail. This is confusing for users.

In reality TLSv1.3 are quite different to older ciphers. They are much
simpler and there are only a small number of them so, arguably, they don't
need the same level of control that the older ciphers have.

This change splits the configuration of TLSv1.3 ciphers from older ones.
By default the TLSv1.3 ciphers are on, so you cannot inadvertently disable
them through your existing config.

Fixes #5359

Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5392)
2018-03-14 10:15:50 +00:00
..
OpenSSL OpenSSL::Test::quotify: put quotes around empty arguments 2018-02-19 10:47:37 +00:00
TLSProxy Split configuration of TLSv1.3 ciphers from older ciphers 2018-03-14 10:15:50 +00:00
checkhandshake.pm Update copyright year 2018-02-13 13:59:25 +00:00
with_fallback.pm Consolidate the locations where we have our internal perl modules 2017-08-15 11:30:47 +02:00