Add more first-class support for SCSVS
authorBenjamin Kaduk <bkaduk@akamai.com>
Fri, 3 Feb 2017 23:17:21 +0000 (17:17 -0600)
committerRichard Levitte <levitte@openssl.org>
Thu, 23 Feb 2017 18:24:37 +0000 (19:24 +0100)
commit650c6e41d60905fa1396dff2c7fe4d6fbb7239ba
tree3cb0b4b2acb11bc36794022f3b070987e66011b8
parentcb7a1f5fca4da49dbad1b3f453e7446baa23c1fe
Add more first-class support for SCSVS

Just as we have a table of ssl3_ciphers, add a table of ssl3_scsvs, to contain
SSL_CIPHER objects for these non-valid ciphers.  This will allow for unified
handling of such indicators, especially as we are preparing to pass them around
between functions.

Since the 'valid' field is not set for the SCSVs, they should not be used
for anything requiring a cryptographic cipher (as opposed to something
being stuck in a cipher-shaped hole in the TLS wire protocol).

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2279)
ssl/s3_lib.c