generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Add HMAC ECC ciphersuites from RFC5289. Include SHA384 PRF support and

Browse Source 
prohibit use of these ciphersuites for TLS < 1.2
This commit is contained in:
Dr. Stephen Henson
2011-07-25 21:45:17 +00:00
parent 90f3e4cf05
commit c8c6e9ecd9
8 changed files with 206 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
ssl/s3_clnt.c
View File

@@ -876,6 +876,14 @@ int ssl3_get_server_hello(SSL *s)
SSLerr(SSL_F_SSL3_GET_SERVER_HELLO,SSL_R_UNKNOWN_CIPHER_RETURNED);
goto f_err;
}
/* TLS v1.2 only ciphersuites require v1.2 or later */
if ((c->algorithm_ssl & SSL_TLSV1_2) &&
(TLS1_get_version(s) < TLS1_2_VERSION))
{
al=SSL_AD_ILLEGAL_PARAMETER;
SSLerr(SSL_F_SSL3_GET_SERVER_HELLO,SSL_R_WRONG_CIPHER_RETURNED);
goto f_err;
}
p+=ssl_put_cipher_by_char(s,NULL,NULL);
sk=ssl_get_ciphers_by_id(s);