ssl_ciphers.c

Go to the documentation of this file.

#include "ucspissl.h"
 
int ssl_ciphers(SSL_CTX *ctx,const char *ciphers) {
  int r = 0;  // no cipher selected
 
  if (!ciphers) return -1;
 
/* TLS <= 1.2           SSL_CTX_set_cipher_list()       
   TLS  = 1.3           SSL_CTX_set_ciphersuites() [only OpenSSL here]
 
   see: https://community.openvpn.net/openvpn/ticket/1159
*/
 
#if (OPENSSL_VERSION_NUMBER > 0x10101000L && !LIBRESSL_VERSION_NUMBER) // 0xmnnffppsL
  if ((r = SSL_CTX_set_ciphersuites(ctx,ciphers)) == 0)
#endif
    r = SSL_CTX_set_cipher_list(ctx,ciphers);   // TLS < 1.3 and fallback
  
  return r;  
}