From 265cf8e312723e688f4dbc8e4d90e0eae5445c97 Mon Sep 17 00:00:00 2001 From: lloyd Date: Thu, 19 Jan 2012 18:14:20 +0000 Subject: Kinda maybe working TLS 1.2 for clients. Not well tested at all, but a basic connection with a GnuTLS server does work. Currently we don't respect the signature_algorithms extension at all, and using SHA-256 with a 12-byte finished value is hardcoded though the spec is that it can depend on the ciphersuite (likely relevant for GOST ciphersuites in particular). --- src/kdf/prf_tls/info.txt | 1 + 1 file changed, 1 insertion(+) (limited to 'src/kdf') diff --git a/src/kdf/prf_tls/info.txt b/src/kdf/prf_tls/info.txt index 9531a6a83..113c92251 100644 --- a/src/kdf/prf_tls/info.txt +++ b/src/kdf/prf_tls/info.txt @@ -1,4 +1,5 @@ define TLS_V10_PRF +define TLS_V12_PRF hmac -- cgit v1.2.3