Allow TLS-1.3 ciphersuites in @SECLEVEL=3 and above
authorTomas Mraz <tmraz@fedoraproject.org>
Tue, 14 Aug 2018 13:03:16 +0000 (15:03 +0200)
committerPauli <paul.dale@oracle.com>
Wed, 22 Aug 2018 03:23:10 +0000 (13:23 +1000)
commitc6ea08836bb97555194afb6fd1a81fd9da29985a
tree9298e11c02bf967791e2e3b9da31a133a404d121
parent3b8e97ab61624f4fbe8bb6a587f4da75cc3d988e
Allow TLS-1.3 ciphersuites in @SECLEVEL=3 and above

The TLS-1.3 ciphersuites must not be blocked by @SECLEVEL=3 even
though they are not explicitly marked as using DH/ECDH.

Reviewed-by: Kurt Roeckx <kurt@roeckx.be>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/6959)
ssl/ssl_cert.c