Artifacts Associated With Ticket 305ee10b8666aa7a3107dc2f1a62b2c3abe35353
Ticket change [be20e14a09] (rid 1566) by anonymous on 2021-09-29 08:34:09:
- foundin initialized to: "1.7.22"
- icomment:
In some cases it is required to change openssl options running tcltls. There may be more and other options as I need and describe here. E.g. running tclhttpd with tcltls needs openssl to change client to server cipher order to pass SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30) as grade A. I don't know a better way as to add SSL_OP_CIPHER_SERVER_PREFERENCE to tcl.c but would prefer to have an option in ::tls::init tls.c:1215 SSL_CTX_set_options( ctx, SSL_OP_ALL | SSL_OP_CIPHER_SERVER_PREFERENCE ); /* all SSL bug workarounds */
- login: "anonymous"
- mimetype: "text/x-markdown"
- private_contact initialized to: "8dda71963bd5edcf76271381ede4f2d7ca6cd4b3"
- severity initialized to: "Important"
- status initialized to: "Open"
- title initialized to: "support of openssl options in tls:init"
- type initialized to: "Feature Request"
Ticket change [a2bbedc6f5] (rid 1567) by anonymous on 2021-09-29 08:42:00:
- icomment:
Of cause the added line should be tls.c:1215 SSL_CTX_set_options( ctx, SSL_OP_CIPHER_SERVER_PREFERENCE ); /* force cipher order selection by server */
- login: "anonymous"
- mimetype: "text/x-markdown"
- priority changed to: "Immediate"
- resolution changed to: "Open"
- icomment: