Author christian.heimes
Recipients alex, benjamin.peterson, christian.heimes, dstufft, janssen, ned.deily
Date 2018-05-18.13:00:38
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1526648438.42.0.682650639539.issue33570@psf.upfronthosting.co.za>
In-reply-to
Content
The definition and configuration of TLS 1.3 cipher suites has changed during the development phase of OpenSSL 1.1.1. The cipher suites are no longer prefixed with "TLS13-". TLS 1.3 are always enabled and can no longer be disabled with SSLContext.set_ciphers() / SSL_CTX_set_cipher_list(). Instead the suites are now configured with SSL_CTX_set_ciphersuites(). See https://github.com/openssl/openssl/pull/5392

For now I'm not going to expose the new API. Instead I'll update the documentation and tests for 2.7 to 3.8 with new names. I'll also mention that TLS 1.3 suites will be always available with OpenSSL 1.1.1.
History
Date User Action Args
2018-05-18 13:00:38christian.heimessetrecipients: + christian.heimes, janssen, benjamin.peterson, ned.deily, alex, dstufft
2018-05-18 13:00:38christian.heimessetmessageid: <1526648438.42.0.682650639539.issue33570@psf.upfronthosting.co.za>
2018-05-18 13:00:38christian.heimeslinkissue33570 messages
2018-05-18 13:00:38christian.heimescreate