Re: [edk2-devel] [PATCH v2 1/1] CryptoPkg/TlsLib: fix tls cipher configuration

2023-10-08 Thread Laszlo Ersek
On 10/7/23 16:32, Li, Yi wrote: > Sorry for delayed response due to PRC holiday. > This is a pretty good solution, I also ran some basic HTTPSBOOT and EAP-TLS > test cases, and all passed. > > Reviewed-by: Yi Li Merged as commit 4ddd8ac3a29d via . L

Re: [edk2-devel] [PATCH v2 1/1] CryptoPkg/TlsLib: fix tls cipher configuration

2023-10-07 Thread Li, Yi
Sorry for delayed response due to PRC holiday. This is a pretty good solution, I also ran some basic HTTPSBOOT and EAP-TLS test cases, and all passed. Reviewed-by: Yi Li -Original Message- From: Gerd Hoffmann Sent: Wednesday, October 4, 2023 5:20 PM To: devel@edk2.groups.io Cc: Li, Yi

Re: [edk2-devel] [PATCH v2 1/1] CryptoPkg/TlsLib: fix tls cipher configuration

2023-10-04 Thread Laszlo Ersek
On 10/4/23 11:20, Gerd Hoffmann wrote: > Trying to configure the TLS ciphers can lead to TLS handshake failures > because TlsCipherMappingTable is not in line with the ciphers actually > supported by OpensslLib. > > Fix that by removing TlsCipherMappingTable altogether. Use > SSL_get_ciphers() in

[edk2-devel] [PATCH v2 1/1] CryptoPkg/TlsLib: fix tls cipher configuration

2023-10-04 Thread Gerd Hoffmann
Trying to configure the TLS ciphers can lead to TLS handshake failures because TlsCipherMappingTable is not in line with the ciphers actually supported by OpensslLib. Fix that by removing TlsCipherMappingTable altogether. Use SSL_get_ciphers() instead to get the stack of ciphers supported by open