Skip to content

Fix setting TLS groups with BoringSSL#11840

Merged
masaori335 merged 2 commits into
apache:masterfrom
masaori335:asf-master-tls-curves
Nov 17, 2024
Merged

Fix setting TLS groups with BoringSSL#11840
masaori335 merged 2 commits into
apache:masterfrom
masaori335:asf-master-tls-curves

Conversation

@masaori335
Copy link
Copy Markdown
Contributor

I found that SSLMultiCertConfigLoader::_set_curves function is not working as expected with BoringSSL. Because this check doesn't work with BoringSSL, because it's defined as a function instead of macro.

#if defined(SSL_CTX_set1_groups_list) || defined(SSL_CTX_set1_curves_list)

@masaori335 masaori335 added the TLS label Nov 1, 2024
@masaori335 masaori335 added this to the 10.1.0 milestone Nov 1, 2024
@masaori335 masaori335 self-assigned this Nov 1, 2024
maskit
maskit previously requested changes Nov 1, 2024
Copy link
Copy Markdown
Member

@maskit maskit left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No duplicate code please.

@bryancall bryancall requested a review from bneradt November 4, 2024 23:03
@masaori335
Copy link
Copy Markdown
Contributor Author

The SSL_CTX_set1_groups_list function is introduced by OpenSSL 1.1.1, and that is ATS 10's minimum supported version.
Thus, we just don't need these ifdefs, I think.

For 9.2.x branch, I'll open another PR.

@masaori335 masaori335 merged commit a860656 into apache:master Nov 17, 2024
@cmcfarlen cmcfarlen modified the milestones: 10.1.0, 10.0.3 Dec 4, 2024
@cmcfarlen
Copy link
Copy Markdown
Contributor

Cherry-picked to v10.0.x

cmcfarlen pushed a commit that referenced this pull request Dec 4, 2024
* Fix setting TLS groups with BoringSSL

* Get rid of #ifdef for old openssl

(cherry picked from commit a860656)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

Status: Picked-10.0.3

Development

Successfully merging this pull request may close these issues.

4 participants