From 0cc7c598ff8ac21222c4f6d7840ce441444a9056 Mon Sep 17 00:00:00 2001 From: Tatsuhiro Tsujikawa Date: Sun, 17 Oct 2021 14:27:16 +0900 Subject: [PATCH] src: TLS_DEFAULT_CIPHERSUITES was deprecated in OpenSSL 3.0.0 --- src/tls.h | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/src/tls.h b/src/tls.h index 8b785ffc..2a6bf458 100644 --- a/src/tls.h +++ b/src/tls.h @@ -57,11 +57,15 @@ constexpr char DEFAULT_CIPHER_LIST[] = "AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256"; constexpr char DEFAULT_TLS13_CIPHER_LIST[] = -#if OPENSSL_1_1_1_API && !defined(OPENSSL_IS_BORINGSSL) +#if OPENSSL_3_0_0_API + "TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256" +#elif OPENSSL_1_1_1_API && !defined(OPENSSL_IS_BORINGSSL) TLS_DEFAULT_CIPHERSUITES -#else // !(OPENSSL_1_1_1_API && !defined(OPENSSL_IS_BORINGSSL)) +#else // !OPENSSL_3_0_0_API && !(OPENSSL_1_1_1_API && + // !defined(OPENSSL_IS_BORINGSSL)) "" -#endif // !(OPENSSL_1_1_1_API && !defined(OPENSSL_IS_BORINGSSL)) +#endif // !OPENSSL_3_0_0_API && !(OPENSSL_1_1_1_API && + // !defined(OPENSSL_IS_BORINGSSL)) ; constexpr auto NGHTTP2_TLS_MIN_VERSION = TLS1_VERSION;