diff options
| author | Gerd Hoffmann <kraxel@redhat.com> | 2023-10-04 11:20:03 +0200 |
|---|---|---|
| committer | mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> | 2023-10-08 10:46:45 +0000 |
| commit | 4ddd8ac3a29d9c5974a19f36c1dc5896d813dc6e (patch) | |
| tree | ac81160f260d5a5553c0860326e62f08a65d2446 /UefiCpuPkg | |
| parent | 5087a07736452518a508a7776002afbce360128b (diff) | |
| download | edk2-4ddd8ac3a29d9c5974a19f36c1dc5896d813dc6e.tar.gz edk2-4ddd8ac3a29d9c5974a19f36c1dc5896d813dc6e.tar.bz2 edk2-4ddd8ac3a29d9c5974a19f36c1dc5896d813dc6e.zip | |
CryptoPkg/TlsLib: fix tls cipher configuration
Trying to configure the TLS ciphers can lead to TLS handshake failures
because TlsCipherMappingTable is not in line with the ciphers actually
supported by OpensslLib.
Fix that by removing TlsCipherMappingTable altogether. Use
SSL_get_ciphers() instead to get the stack of ciphers supported by
openssl. Name and ID of the ciphers can be queried using the
SSL_CIPHER_get_name() and SSL_CIPHER_get_protocol_id() functions,
which allows us to map IDs to names without a hard-code table.
Bugzilla: https://bugzilla.tianocore.org/show_bug.cgi?id=2541
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Message-Id: <20231004092003.3809321-1-kraxel@redhat.com>
Reviewed-by: Laszlo Ersek <lersek@redhat.com>
Reviewed-by: Yi Li <yi1.li@intel.com>
Diffstat (limited to 'UefiCpuPkg')
0 files changed, 0 insertions, 0 deletions