File 0478-ssl-List-missing-options-in-version-categories.patch of Package erlang
From 49ff756b963dd08ed5b854c2036da0bc73421cab Mon Sep 17 00:00:00 2001
From: Ingela Anderton Andin <ingela@erlang.org>
Date: Thu, 25 Aug 2022 10:32:21 +0200
Subject: [PATCH] ssl: List missing options in version categories
---
lib/ssl/src/ssl_internal.hrl | 28 ++++++++++++++++++++++++----
1 file changed, 24 insertions(+), 4 deletions(-)
diff --git a/lib/ssl/src/ssl_internal.hrl b/lib/ssl/src/ssl_internal.hrl
index 93d7c2456e..6b1bd360f8 100644
--- a/lib/ssl/src/ssl_internal.hrl
+++ b/lib/ssl/src/ssl_internal.hrl
@@ -220,10 +220,30 @@
versions => {[], [protocol]}
}).
--define('TLS-1_3_ONLY_OPTIONS', [anti_replay, cookie, early_data, key_update_at, middlebox_comp_mode, session_tickets, supported_groups, use_ticket]).
--define('FROM_TLS-1_2_ONLY_OPTIONS', [signature_algs, signature_algs_cert]).
--define('PRE_TLS-1_3_ONLY_OPTIONS', [client_renegotiation, secure_renegotiate]).
--define('TLS-1_0_ONLY_OPTIONS', [padding_check, beast_mitigation]).
+-define('TLS-1_3_ONLY_OPTIONS', [anti_replay,
+ certificate_authorities,
+ cookie,
+ early_data,
+ key_update_at,
+ middlebox_comp_mode,
+ session_tickets,
+ supported_groups,
+ use_ticket]).
+-define('FROM_TLS-1_2_ONLY_OPTIONS', [signature_algs,
+ signature_algs_cert]).
+-define('PRE_TLS-1_3_ONLY_OPTIONS', [client_renegotiation,
+ dh_file,
+ eccs,
+ fallback,
+ secure_renegotiate,
+ psk_identity,
+ reuse_session,
+ reuse_sessions,
+ srp_identity,
+ user_lookup_fun
+ ]).
+-define('TLS-1_0_ONLY_OPTIONS', [padding_check,
+ beast_mitigation]).
-record(socket_options,
{
--
2.35.3