Commit Graph

3 Commits

Author SHA1 Message Date
Matúš Honěk 54f6fd1feb NSS: Enhance OpenLDAP to support TLSv1.3 protocol with NSS
Resolves: #1435689
2017-03-24 20:23:40 +01:00
Matúš Honěk d0828bee6c NSS: Rearrange ciphers-, parsing-, and protocol-related patches
In addition, remove (or better, do not include anymore) unused
variables *variant* and *range* that were forgotten to be
removed when landing patch openldap-nss-protocol-version-new-api.patch
in commit 9e30b98.

Related: #1435689
2017-03-24 20:02:46 +01:00
Matúš Honěk da1f719199 NSS: fix incorrect multi-keyword parsing and support new ones
- add multi_mask, negative_mask, and multi_strength
  + some keywords may describe multiple cipher suite parameters at once
- fix masks decision tree
  + all masks have to fit the cipher suite to include it
- correct 'action' evaluation
  + plus sign means ordering (which NSS does not support)
  + no sign presence means adding implicitly
- extend keywords for new future ciphers

Backporting: #1372349
Resolves: #1243517
2017-01-29 19:46:00 +01:00