Branch: Tag:

2015-04-27

2015-04-27 12:53:08 by Henrik Grubbström (Grubba) <grubba@grubba.org>

Pike 8.0: Allow non-ephemeral key exchanges.

Only SSL/TLS suites with ephemeral key echanges were ever selected.

The cipher suite selection should now work as intended.

2400: Inside #if constant(SSL.ServerConnection)
   set_version();    }    } else { -  suites = ctx->get_suites(bits); +  suites = ctx->get_suites(bits, 1);       // Make sure the min version is restored in case we've    // switched from Suite B.