Skip to content
GitLab
  • Menu
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
    • Switch to GitLab Next
  • Sign in / Register
  • GnuTLS GnuTLS
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
    • Locked Files
  • Issues 251
    • Issues 251
    • List
    • Boards
    • Service Desk
    • Milestones
    • Iterations
    • Requirements
  • Merge requests 16
    • Merge requests 16
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
    • Test Cases
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Code review
    • Insights
    • Issue
    • Repository
  • Wiki
    • Wiki
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • gnutlsgnutls
  • GnuTLSGnuTLS
  • Issues
  • #924
Closed
Open
Created Jan 31, 2020 by Dmitry Baryshkov@lumagOwner

Support ciphersuites with matching mac/cipher(/KX)

GOST TLS 1.3 will have two pairs of ciphersuites, each pair using the same cipher and MAC (differing only in external re-keying settings). GnuTLS can not handle this at this moment when generating priority lists.

Another use case is supporting ciphersuites during standardisation phase, when one would be using both assigned and private ids.

For my tests I have been extending set_cipher_list() with if ce->id == ID1 then also add ciphersuite ID2, but this does not look like a production code.

Assignee
Assign to
Time tracking