[gnutls-devel] GnuTLS | Compiled-in, yet unsupported by default, TLS versions (!1157)

[Development of GNU's TLS library]

Dimitri John Ledkov commented on a discussion on lib/algorithms/protocols.c: https://gitlab.com/gnutls/gnutls/merge_requests/1157#note_268069397

>  	return GNUTLS_E_INVALID_REQUEST;
>  }
>  
> +int _gnutls_version_mark_supported(const char *name)
> +{
> +#ifndef DISABLE_SYSTEM_CONFIG
> +	version_entry_st *p;
> +
> +	for (p = sup_versions; p->name != NULL; p++)
> +		if (c_strcasecmp(p->name, name) == 0) {
> +			p->supported = 1;

I wonder if supported-versions should then toggle "obsolete" field of the protocol version instead. And configure time option marking tls1.1/1.0 as obsolete=1.

Or if disabled-versions should keep a list, and toggle all the disabled versions to zero at the end of parsing.

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/merge_requests/1157#note_268069397
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20200107/54d293d8/attachment.html>