generic-library/poco
1
0
Fork 0
mirror of https://github.com/pocoproject/poco.git synced 2025-10-25 10:09:36 +02:00
Code Issues Projects Releases Wiki Activity

fix(NetSSL): Incorrect setting of ciphersuites for TLSv1.3 #4610 (#4752)

Browse Source
This commit is contained in:
Aleksandar Fabijanic
2024-10-30 19:12:51 -05:00
committed by GitHub
parent c77d021790
commit 59afdc2c04
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
NetSSL_OpenSSL/src/Context.cpp
View File

@@ -189,7 +189,11 @@ void Context::init(const Params& params)
else else
SSL_CTX_set_verify(_pSSLContext, params.verificationMode, &SSLManager::verifyClientCallback); SSL_CTX_set_verify(_pSSLContext, params.verificationMode, &SSLManager::verifyClientCallback);
#if OPENSSL_VERSION_NUMBER >= 0x30000000L
SSL_CTX_set_ciphersuites(_pSSLContext, params.cipherList.c_str());
#else
SSL_CTX_set_cipher_list(_pSSLContext, params.cipherList.c_str()); SSL_CTX_set_cipher_list(_pSSLContext, params.cipherList.c_str());
#endif // OPENSSL_VERSION_NUMBER >= 0x30000000L
SSL_CTX_set_verify_depth(_pSSLContext, params.verificationDepth); SSL_CTX_set_verify_depth(_pSSLContext, params.verificationDepth);
SSL_CTX_set_mode(_pSSLContext, SSL_MODE_AUTO_RETRY); SSL_CTX_set_mode(_pSSLContext, SSL_MODE_AUTO_RETRY);
SSL_CTX_set_session_cache_mode(_pSSLContext, SSL_SESS_CACHE_OFF); SSL_CTX_set_session_cache_mode(_pSSLContext, SSL_SESS_CACHE_OFF);