filip/Stalwart
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Fix: TLS: Disable cipher suited option disables wrong ciphers

Browse Source
This commit is contained in:
Maurus Decimus
2026-04-28 10:49:49 +02:00
parent b1c76b3a9f
commit 5c4e447728
2 changed files with 4 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
crates/common/src/config/server/listener.rs
View File

@@ -213,14 +213,10 @@ impl Listeners {
let mut disabled_ciphers: Vec<SupportedCipherSuite> = Vec::new();
for disabled in listener.tls_disable_cipher_suites {
disabled_ciphers.push(match disabled {
TlsCipherSuite::Tls13Aes256GcmSha384 => {
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
}
TlsCipherSuite::Tls13Aes128GcmSha256 => {
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
}
TlsCipherSuite::Tls13Aes256GcmSha384 => TLS13_AES_256_GCM_SHA384,
TlsCipherSuite::Tls13Aes128GcmSha256 => TLS13_AES_128_GCM_SHA256,
TlsCipherSuite::Tls13Chacha20Poly1305Sha256 => {
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
TLS13_CHACHA20_POLY1305_SHA256
}
TlsCipherSuite::TlsEcdheEcdsaWithAes256GcmSha384 => {
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384