audk/CryptoPkg/Library/TlsLib
Gerd Hoffmann 4ddd8ac3a2 CryptoPkg/TlsLib: fix tls cipher configuration
Trying to configure the TLS ciphers can lead to TLS handshake failures
because TlsCipherMappingTable is not in line with the ciphers actually
supported by OpensslLib.

Fix that by removing TlsCipherMappingTable altogether.  Use
SSL_get_ciphers() instead to get the stack of ciphers supported by
openssl.  Name and ID of the ciphers can be queried using the
SSL_CIPHER_get_name() and SSL_CIPHER_get_protocol_id() functions,
which allows us to map IDs to names without a hard-code table.

Bugzilla: https://bugzilla.tianocore.org/show_bug.cgi?id=2541
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Message-Id: <20231004092003.3809321-1-kraxel@redhat.com>
Reviewed-by: Laszlo Ersek <lersek@redhat.com>
Reviewed-by: Yi Li <yi1.li@intel.com>
2023-10-08 10:46:45 +00:00
..
SysCall CryptoPkg/Library: Cleanup BaseCryptLib and TlsLib 2022-10-24 07:49:43 +00:00
InternalTlsLib.h CryptoPkg: Extend Tls function library 2022-10-10 06:29:51 +00:00
TlsConfig.c CryptoPkg/TlsLib: fix tls cipher configuration 2023-10-08 10:46:45 +00:00
TlsInit.c CryptoPkg: Apply uncrustify changes 2021-12-07 17:24:28 +00:00
TlsLib.inf CryptoPkg/Library: Cleanup BaseCryptLib and TlsLib 2022-10-24 07:49:43 +00:00
TlsLib.uni CryptoPkg: Replace BSD License with BSD+Patent License 2019-04-09 09:10:22 -07:00
TlsProcess.c CryptoPkg/TlsLib: use unsigned long for ErrorCode 2023-08-09 07:10:31 +00:00