On Sun, Feb 06, 2022 at 07:37:39AM +0100, Anton Lindqvist wrote:
> On Sat, Feb 05, 2022 at 11:18:18AM -0700, Theo Buehler wrote:
> > CVSROOT:    /cvs
> > Module name:        src
> > Changes by: t...@cvs.openbsd.org    2022/02/05 11:18:18
> > 
> > Modified files:
> >     lib/libssl     : s3_lib.c ssl_ciphers.c tls1.h 
> > 
> > Log message:
> > Switch TLSv1.3 cipher names from AEAD- to OpenSSL's TLS_
> > 
> > OpenSSL chose to break the previous naming convention for ciphers and
> > to adopt TLS_* "RFC" names instead. Unfortunately, these names are
> > exposed in several APIs and some language bindings test for these
> > non-standard names instead of cipher values, which is ... unfortunate
> > (others would say "plain crazy").
> > 
> > We currently have to maintain patches in regress and ports (p5-Net-SSLeay,
> > openssl-ruby-tests - which means that Ruby will pick this up at some point)
> > to work around this difference and that's just not worth the effort.
> > 
> > The old AEAD- names will become aliases and continue to work, but in
> > openssl ciphers and netcat output the TLS_* names will now be displayed.
> > 
> > "I would be very happy if this gets committed" bluhm
> > ok beck inoguchi, begrudgingly ok jsing
> 
>  4) Failure: test_ciphersuites_method_tls_connection(OpenSSL::TestSSL):
>   exceptions on 1 threads:

You'll need this: https://marc.info/?l=openbsd-ports-cvs&m=164408612316737&w=2

Reply via email to