提交 48c16012 编写于 作者: D Dmitry Belyavsky 提交者: Dr. Stephen Henson

Don't use GOST ciphersuites with DTLS.

RT#4438
Reviewed-by: NMatt Caswell <matt@openssl.org>
Reviewed-by: NStephen Henson <steve@openssl.org>
上级 7c0ef843
...@@ -2506,7 +2506,7 @@ static SSL_CIPHER ssl3_ciphers[] = ...@@ -2506,7 +2506,7 @@ static SSL_CIPHER ssl3_ciphers[] =
SSL_eGOST2814789CNT, SSL_eGOST2814789CNT,
SSL_GOST89MAC, SSL_GOST89MAC,
TLS1_VERSION, TLS1_2_VERSION, TLS1_VERSION, TLS1_2_VERSION,
DTLS1_VERSION, DTLS1_2_VERSION, 0, 0,
SSL_HIGH, SSL_HIGH,
SSL_HANDSHAKE_MAC_GOST94 | TLS1_PRF_GOST94 | TLS1_STREAM_MAC, SSL_HANDSHAKE_MAC_GOST94 | TLS1_PRF_GOST94 | TLS1_STREAM_MAC,
256, 256,
...@@ -2521,7 +2521,7 @@ static SSL_CIPHER ssl3_ciphers[] = ...@@ -2521,7 +2521,7 @@ static SSL_CIPHER ssl3_ciphers[] =
SSL_eNULL, SSL_eNULL,
SSL_GOST94, SSL_GOST94,
TLS1_VERSION, TLS1_2_VERSION, TLS1_VERSION, TLS1_2_VERSION,
DTLS1_VERSION, DTLS1_2_VERSION, 0, 0,
SSL_STRONG_NONE, SSL_STRONG_NONE,
SSL_HANDSHAKE_MAC_GOST94 | TLS1_PRF_GOST94, SSL_HANDSHAKE_MAC_GOST94 | TLS1_PRF_GOST94,
0, 0,
...@@ -2536,7 +2536,7 @@ static SSL_CIPHER ssl3_ciphers[] = ...@@ -2536,7 +2536,7 @@ static SSL_CIPHER ssl3_ciphers[] =
SSL_eGOST2814789CNT12, SSL_eGOST2814789CNT12,
SSL_GOST89MAC12, SSL_GOST89MAC12,
TLS1_VERSION, TLS1_2_VERSION, TLS1_VERSION, TLS1_2_VERSION,
DTLS1_VERSION, DTLS1_2_VERSION, 0, 0,
SSL_HIGH, SSL_HIGH,
SSL_HANDSHAKE_MAC_GOST12_256 | TLS1_PRF_GOST12_256 | TLS1_STREAM_MAC, SSL_HANDSHAKE_MAC_GOST12_256 | TLS1_PRF_GOST12_256 | TLS1_STREAM_MAC,
256, 256,
...@@ -2551,7 +2551,7 @@ static SSL_CIPHER ssl3_ciphers[] = ...@@ -2551,7 +2551,7 @@ static SSL_CIPHER ssl3_ciphers[] =
SSL_eNULL, SSL_eNULL,
SSL_GOST12_256, SSL_GOST12_256,
TLS1_VERSION, TLS1_2_VERSION, TLS1_VERSION, TLS1_2_VERSION,
DTLS1_VERSION, DTLS1_2_VERSION, 0, 0,
SSL_STRONG_NONE, SSL_STRONG_NONE,
SSL_HANDSHAKE_MAC_GOST12_256 | TLS1_PRF_GOST12_256 | TLS1_STREAM_MAC, SSL_HANDSHAKE_MAC_GOST12_256 | TLS1_PRF_GOST12_256 | TLS1_STREAM_MAC,
0, 0,
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册