]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
ktls: Reject attempts to enable AES-CBC with TLS 1.3.
authorJohn Baldwin <jhb@FreeBSD.org>
Wed, 13 Oct 2021 19:12:58 +0000 (12:12 -0700)
committerJohn Baldwin <jhb@FreeBSD.org>
Wed, 13 Oct 2021 19:12:58 +0000 (12:12 -0700)
commita63752cce6462d08bbec08cad931d70dec2f5b4c
tree9a59115f482282c588fd691f3765afc182ab2fad
parent2144431c11529d1107f4440a5fe57559fb20002c
ktls: Reject attempts to enable AES-CBC with TLS 1.3.

AES-CBC cipher suites are not supported in TLS 1.3.

Reported by: syzbot+ab501c50033ec01d53c6@syzkaller.appspotmail.com
Reviewed by: tuexen, markj
Differential Revision: https://reviews.freebsd.org/D32404
sys/kern/uipc_ktls.c