[openssl/openssl] e5487c: Don't complain with "no cipher match" for QUIC obj...

[Matt Caswell]

Branch: refs/heads/openssl-3.4
Home: https://github.com/openssl/openssl
Commit: e5487c4f19384c5b74354b619c0261ef7b50b606
https://github.com/openssl/openssl/commit/e5487c4f19384c5b74354b619c0261ef7b50b606
Author: Matt Caswell <ma...@openssl.org>
Date: 2024-11-08 (Fri, 08 Nov 2024)

Changed paths:
M ssl/ssl_lib.c

Log Message:
-----------
Don't complain with "no cipher match" for QUIC objects

Calling the functions SSL_CTX_set_cipher_list() or SSL_set_cipher_list() will
return the error "no cipher match" if no TLSv1.2 (or below) ciphers are enabled
after calling them. However this is normal behaviour for QUIC objects which do
not support TLSv1.2 ciphers. Therefore we should suppress that error in this
case.

Fixes #25878

Reviewed-by: Viktor Dukhovni <vik...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/25886)

(cherry picked from commit 40237bf97aeb855856e7b74ed393e1767631e1a2)


Commit: 10c0338a1b882005f5fa4ab1d62b1b0dadd30309
https://github.com/openssl/openssl/commit/10c0338a1b882005f5fa4ab1d62b1b0dadd30309
Author: Matt Caswell <ma...@openssl.org>
Date: 2024-11-08 (Fri, 08 Nov 2024)

Changed paths:
M test/quicapitest.c

Log Message:
-----------
Add a test for setting TLSv1.2 ciphersuites on a QUIC object

Reviewed-by: Viktor Dukhovni <vik...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/25886)

(cherry picked from commit b10cfd93fd58cc1e9c876be159253b5389dc11a5)


Compare: https://github.com/openssl/openssl/compare/1181bc506c20...10c0338a1b88

To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications