tls-server: Determine supported/configured suites and versions early

If we don't do this, we might negotiate a TLS version for which we don't
have any suites configured, so that the cipher suite negotiation
subsequently fails.
This commit is contained in:
Tobias Brunner
2021-02-12 14:35:23 +01:00
parent 8a6edc08a4
commit 06424efa17
3 changed files with 9 additions and 7 deletions
+1 -1
View File
@@ -436,7 +436,7 @@ struct tls_crypto_t {
/**
* Get a list of supported TLS cipher suites.
*
* @param suites list of suites, points to internal data
* @param suites optional list of suites, points to internal data
* @return number of suites returned
*/
int (*get_cipher_suites)(tls_crypto_t *this, tls_cipher_suite_t **suites);