Allow TLSv1.3 in a no-ec build
authorMatt Caswell <matt@openssl.org>
Thu, 13 Jun 2019 10:06:12 +0000 (11:06 +0100)
committerMatt Caswell <matt@openssl.org>
Mon, 17 Jun 2019 09:57:19 +0000 (10:57 +0100)
commitdbc6268f68e50b2e49d7c5b1157b4f6bcea5d6f9
tree67a9fa2beac320e8d437c04225cbc377a0145f2d
parent8013a933dacc80096e2bfca06c00f9ec29adb35b
Allow TLSv1.3 in a no-ec build

Now that we have TLSv1.3 FFDHE support there is no reason why we should
not allow TLSv1.3 to be used in a no-ec build. This commit enables that
to happen.

It also fixes no-ec which was previously broken.

Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/9156)
23 files changed:
Configure
ssl/s3_lib.c
ssl/ssl_lib.c
ssl/ssl_locl.h
ssl/statem/extensions.c
ssl/statem/extensions_clnt.c
ssl/statem/extensions_srvr.c
ssl/statem/statem_lib.c
ssl/statem/statem_locl.h
ssl/t1_lib.c
test/recipes/70-test_clienthello.t
test/recipes/70-test_key_share.t
test/recipes/70-test_sslextension.t
test/recipes/70-test_tls13cookie.t
test/recipes/70-test_tls13hrr.t
test/recipes/70-test_tls13kexmodes.t
test/recipes/70-test_tls13messages.t
test/recipes/70-test_tls13psk.t
test/recipes/80-test_ssl_new.t
test/recipes/90-test_gost.t
test/ssl-tests/protocol_version.pm
test/sslapitest.c
test/tls13ccstest.c