Reset TLS 1.3 ciphers in SSL_CTX_set_ssl_version()
authorBenjamin Kaduk <bkaduk@akamai.com>
Wed, 19 Sep 2018 14:02:04 +0000 (09:02 -0500)
committerBenjamin Kaduk <kaduk@mit.edu>
Wed, 19 Sep 2018 22:02:36 +0000 (17:02 -0500)
commit1766493bbd92cfcee6fca068ffe972092d43892c
treeba730e96e969b320a3e77896e9c69407d2d27133
parentf560ff623b900b2460aa043441b527e304735eb1
Reset TLS 1.3 ciphers in SSL_CTX_set_ssl_version()

Historically SSL_CTX_set_ssl_version() has reset the cipher list
to the default.  Splitting TLS 1.3 ciphers to be tracked separately
caused a behavior change, in that TLS 1.3 cipher configuration was
preserved across calls to SSL_CTX_set_ssl_version().  To restore commensurate
behavior with the historical behavior, set the ciphersuites to the default as
well as setting the cipher list to the default.

Closes: #7226
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/7270)

(cherry picked from commit 2340ed277b7c5365e83a32eb7d5fa32c4071fb21)
ssl/ssl_lib.c