rsyslog / librelp

OFFICIAL librelp repository on github
https://www.rsyslog.com/librelp/
GNU General Public License v3.0
30 stars 36 forks source link

openssl: Fix tlscommand support for ciphers. #225

Closed alorbach closed 3 years ago

alorbach commented 3 years ago

When the client tried to conntect to the server, custom cipherstrings (Set by tlscommands feature) were not used. This could lead to the negotiation of different and potentially weaker ciphers. Other custom tlscommands settings like Protocol where not affected. We do not overwrite the custom ciphers anymore if they are set by tlscommands. Another problem only related to the relp receiver (server) was, that the custom tlscommands/priority string where not applied on the accepted client connections. This could lead to the same problem as the default ciphers were used.

Besides the main problem, the following changes were applied:

closes: https://github.com/rsyslog/librelp/issues/224