Commit 319ae907 authored May 17, 2019 by Hubert Kario Committed by Kamil Dudka May 27, 2019

nss: allow to specify TLS 1.3 ciphers if supported by NSS

Closes #3916

parent b3173cfa

docs/CIPHERS.md

+6 −0

Original line number	Diff line number	Diff line
		@@ -269,6 +269,12 @@ When specifying multiple cipher names, separate them with colon (`:`).
		`ecdhe_ecdsa_chacha20_poly1305_sha_256`
		`dhe_rsa_chacha20_poly1305_sha_256`

		### TLS 1.3 cipher suites

		`aes_128_gcm_sha_256`
		`aes_256_gcm_sha_384`
		`chacha20_poly1305_sha_256`

		## GSKit

		Ciphers are internally defined as

lib/vtls/nss.c

+5 −0

Original line number	Diff line number	Diff line
		@@ -216,6 +216,11 @@ static const cipher_s cipherlist[] = {
		{"dhe_rsa_chacha20_poly1305_sha_256",
		TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256},
		#endif
		#ifdef TLS_AES_256_GCM_SHA384
		{"aes_128_gcm_sha_256", TLS_AES_128_GCM_SHA256},
		{"aes_256_gcm_sha_384", TLS_AES_256_GCM_SHA384},
		{"chacha20_poly1305_sha_256", TLS_CHACHA20_POLY1305_SHA256},
		#endif
		};

		#ifdef WIN32