Re: discuss, how better guard SSL_CTX_set_ciphersuites ?

On Sat, Nov 21, 2020 at 02:53:05PM +0500, ??? wrote: > here we go! Merged, thank you! Willy

Re: discuss, how better guard SSL_CTX_set_ciphersuites ?

here we go! сб, 21 нояб. 2020 г. в 14:40, Willy Tarreau : > On Sat, Nov 21, 2020 at 02:16:21PM +0500, ??? wrote: > > ??, 21 . 2020 ?. ? 10:18, Willy Tarreau : > > > > > On Fri, Nov 20, 2020 at 02:10:33AM +0500, ??? wrote: > > > > I'd like to get rid of OPENSSL_VERSION as

Re: discuss, how better guard SSL_CTX_set_ciphersuites ?

On Sat, Nov 21, 2020 at 02:16:21PM +0500, ??? wrote: > ??, 21 . 2020 ?. ? 10:18, Willy Tarreau : > > > On Fri, Nov 20, 2020 at 02:10:33AM +0500, ??? wrote: > > > I'd like to get rid of OPENSSL_VERSION as much as possible. > > > what would be better for guarding TLS13 ciphers

Re: discuss, how better guard SSL_CTX_set_ciphersuites ?

сб, 21 нояб. 2020 г. в 10:18, Willy Tarreau : > On Fri, Nov 20, 2020 at 02:10:33AM +0500, ??? wrote: > > I'd like to get rid of OPENSSL_VERSION as much as possible. > > what would be better for guarding TLS13 ciphers manipulation ? > > > > approach 1 (macro defined in openssl-compat.h) >

Re: discuss, how better guard SSL_CTX_set_ciphersuites ?

On Fri, Nov 20, 2020 at 02:10:33AM +0500, ??? wrote: > I'd like to get rid of OPENSSL_VERSION as much as possible. > what would be better for guarding TLS13 ciphers manipulation ? > > approach 1 (macro defined in openssl-compat.h) > > #if ((OPENSSL_VERSION_NUMBER >= 0x10101000L) && >

discuss, how better guard SSL_CTX_set_ciphersuites ?

I'd like to get rid of OPENSSL_VERSION as much as possible. what would be better for guarding TLS13 ciphers manipulation ? approach 1 (macro defined in openssl-compat.h) #if ((OPENSSL_VERSION_NUMBER >= 0x10101000L) && !defined(LIBRESSL_VERSION_NUMBER) && !defined(OPENSSL_IS_BORINGSSL)) #define