whytofly
/
qt6-bb10
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Schannel: fix handling of empty ciphers list 

Contrary to OpenSSL the new ciphers support in Schannel
would disallow all ciphers when the list was empty.
The pre-existing behavior was to use the default list.

Amends f7792d2b6d

Pick-to: 6.7
Change-Id: I0e79013ac86261c4afa4affb28cb1838177c12de
Reviewed-by: Tobias Koenig <tobias.koenig@kdab.com>
Reviewed-by: Timur Pocheptsov <timur.pocheptsov@qt.io>
bb10
Mårten Nordheim 2024-03-11 16:58:24 +01:00
parent 0886035bcd
commit 2d521002ca
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/plugins/tls/schannel/qtls_schannel.cpp
View File

@ -1145,10 +1145,12 @@ bool TlsCryptographSchannel::acquireCredentialsHandle()
}
const QList<QSslCipher> ciphers = configuration.ciphers();
if (!containsTls13Cipher(ciphers))
if (!ciphers.isEmpty() && !containsTls13Cipher(ciphers))
protocols &= ~SP_PROT_TLS1_3;
QList<CRYPTO_SETTINGS> cryptoSettings = cryptoSettingsForCiphers(ciphers);
QList<CRYPTO_SETTINGS> cryptoSettings;
if (!ciphers.isEmpty())
cryptoSettings = cryptoSettingsForCiphers(ciphers);
TLS_PARAMETERS tlsParameters = {
0,