Diffusion FreeBSD src repository 900a28fe33ef

ktls: Reject some invalid cipher suites.
900a28fe33ef
Actions

Tags

None

Referenced Files

None

Subscribers

None

Description

ktls: Reject some invalid cipher suites.

Reject AES-CBC cipher suites for TLS 1.0 and TLS 1.1 using auth algorithms other than SHA1-HMAC.

Reject AES-GCM cipher suites for TLS versions older than 1.2.

Reviewed by: markj
Sponsored by: Netflix
Differential Revision: https://reviews.freebsd.org/D32842

Details

Provenance

jhb	Authored on Nov 15 2021, 7:28 PM

Reviewer

Differential Revision

D32842: ktls: Reject some invalid cipher suites.

Parents

rG0ff2a12ae32a: ktls: Add tests for sending empty fragments for TLS 1.0 connections.

Branches

Unknown

Tags

Unknown

Event Timeline

jhb committed rG900a28fe33ef: ktls: Reject some invalid cipher suites. (authored by jhb).Nov 15 2021, 7:30 PM

jhb added an edge: D32842: ktls: Reject some invalid cipher suites..Nov 15 2021, 8:03 PM

jhb mentioned this in rG94280c58116f: ktls: Reject some invalid cipher suites..Nov 23 2021, 11:14 PM

Changes (1)

Path

Size

sys/

kern/

rG900a28fe33ef

sys/kern/uipc_ktls.c

Loading...