Update TLS 1.2 ciphers and TLS 1.3 ciphers order

Tantrix commented 2 years ago

https://sourceforge.net/p/dcplusplus/code/ci/dc0f387ed4958d0f15da7e89f15a17e31ef9997e/ https://dcpp.wordpress.com/2020/03/07/dc-0-8681-will-require-tls-1-2-or-tls-1-3/

pavel-pimenov commented 2 years ago

DC++ code: F:\hg\dcplusplus-code\dcpp\CryptoManager.cpp

    const char ciphersuites12[] = "ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA256";

    // Arranged in order of performance, depending on presence of AES-NI and CLMUL
    const char ciphersuites13_aesgcm[] = "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256";
    const char ciphersuites13_chacha[] = "TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384";

Tantrix commented 2 years ago

Ну так ты ж учти, что для TLS 1.3 внутри DC++ есть механизм определения поддержки ускорителей на уровне железа. Для TLS 1.2 я шифронаборы такие же и прописал.

depending on presence of AES-NI and CLMUL

https://sourceforge.net/p/dcplusplus/code/ci/454a53433a701bea163cef51bd79696b1fdb2af2/

pavel-pimenov / flylinkdc-r6xx

Update TLS 1.2 ciphers and TLS 1.3 ciphers order #24