File 0478-ssl-List-missing-options-in-version-catego... of Package erlang

Overview Repositories Revisions Requests Users Attributes Meta

File 0478-ssl-List-missing-options-in-version-categories.patch of Package erlang

From 49ff756b963dd08ed5b854c2036da0bc73421cab Mon Sep 17 00:00:00 2001
From: Ingela Anderton Andin <ingela@erlang.org>
Date: Thu, 25 Aug 2022 10:32:21 +0200
Subject: [PATCH] ssl: List missing options in version categories

---
 lib/ssl/src/ssl_internal.hrl | 28 ++++++++++++++++++++++++----
 1 file changed, 24 insertions(+), 4 deletions(-)

diff --git a/lib/ssl/src/ssl_internal.hrl b/lib/ssl/src/ssl_internal.hrl
index 93d7c2456e..6b1bd360f8 100644
--- a/lib/ssl/src/ssl_internal.hrl
+++ b/lib/ssl/src/ssl_internal.hrl
@@ -220,10 +220,30 @@
           versions                   => {[], [protocol]}
          }).
 
--define('TLS-1_3_ONLY_OPTIONS', [anti_replay, cookie, early_data, key_update_at, middlebox_comp_mode, session_tickets, supported_groups, use_ticket]).
--define('FROM_TLS-1_2_ONLY_OPTIONS', [signature_algs, signature_algs_cert]).
--define('PRE_TLS-1_3_ONLY_OPTIONS', [client_renegotiation, secure_renegotiate]).
--define('TLS-1_0_ONLY_OPTIONS', [padding_check, beast_mitigation]).
+-define('TLS-1_3_ONLY_OPTIONS', [anti_replay,
+                                 certificate_authorities,
+                                 cookie,
+                                 early_data,
+                                 key_update_at,
+                                 middlebox_comp_mode,
+                                 session_tickets,
+                                 supported_groups,
+                                 use_ticket]).
+-define('FROM_TLS-1_2_ONLY_OPTIONS', [signature_algs,
+                                      signature_algs_cert]).
+-define('PRE_TLS-1_3_ONLY_OPTIONS', [client_renegotiation,
+                                     dh_file,
+                                     eccs,
+                                     fallback,
+                                     secure_renegotiate,
+                                     psk_identity,
+                                     reuse_session,
+                                     reuse_sessions,
+                                     srp_identity,
+                                     user_lookup_fun
+                                    ]).
+-define('TLS-1_0_ONLY_OPTIONS', [padding_check,
+                                 beast_mitigation]).
 
 -record(socket_options,
 	{
-- 
2.35.3

Places

File 0478-ssl-List-missing-options-in-version-categories.patch of Package erlang

Places