Branch: refs/heads/master
  Home:   https://github.com/tianocore/edk2
  Commit: 4ddd8ac3a29d9c5974a19f36c1dc5896d813dc6e
      
https://github.com/tianocore/edk2/commit/4ddd8ac3a29d9c5974a19f36c1dc5896d813dc6e
  Author: Gerd Hoffmann <[email protected]>
  Date:   2023-10-08 (Sun, 08 Oct 2023)

  Changed paths:
    M CryptoPkg/Library/TlsLib/TlsConfig.c

  Log Message:
  -----------
  CryptoPkg/TlsLib: fix tls cipher configuration

Trying to configure the TLS ciphers can lead to TLS handshake failures
because TlsCipherMappingTable is not in line with the ciphers actually
supported by OpensslLib.

Fix that by removing TlsCipherMappingTable altogether.  Use
SSL_get_ciphers() instead to get the stack of ciphers supported by
openssl.  Name and ID of the ciphers can be queried using the
SSL_CIPHER_get_name() and SSL_CIPHER_get_protocol_id() functions,
which allows us to map IDs to names without a hard-code table.

Bugzilla: https://bugzilla.tianocore.org/show_bug.cgi?id=2541
Signed-off-by: Gerd Hoffmann <[email protected]>
Message-Id: <[email protected]>
Reviewed-by: Laszlo Ersek <[email protected]>
Reviewed-by: Yi Li <[email protected]>




_______________________________________________
edk2-commits mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/edk2-commits

Reply via email to