search

ryru / strongswan

strongSwan - IPsec-based VPN
https://www.strongswan.org
Other
0 stars 1 forks source link

Configure ciphers via configuration file for TLS 1.3 #15

Closed ryru closed 3 years ago

ryru commented 4 years ago

Correct, if no cipher suite was found with the initial key type (those are tied to each other with earlier TLS versions and the available cipher suites may have been explicitly configured to exclude the selected key type - that actually reminds me, are the TLS 1.3 suites configurable?) another attempt at finding a suite is made after switching to the "other" key type.

_Originally posted by @tobiasbrunner in https://github.com/ryru/strongswan/pull/12#discussion_r492190095_

ryru commented 4 years ago

See also: https://wiki.strongswan.org/projects/strongswan/wiki/EapTls

tobiasbrunner commented 3 years ago

I've pushed a commit that allows filtering for new ciphers like ChaCha20/Poly1305 to the upstream tls13 branch.