openssl/openssl

Suggestion: add SSL_CTX_get_ciphersuites() to go along with SSL_CTX_set_ciphersuites()

Open

#13,704 opened on Dec 18, 2020

View on GitHub
 (9 comments) (0 reactions) (0 assignees)C (11,262 forks)batch import
backlog fixhelp wantedtriaged: feature

Repository metrics

Stars
 (30,157 stars)
PR merge metrics
 (No merged PRs in 30d)

Description

There is int SSL_CTX_set_ciphersuites(SSL_CTX *ctx, const char *str); to set the TLS 1.3 suites, but I can't find any SSL_CTX_get_ciphersuites to get the TLS 1.3 cipher suites that are currently set (like SSL_CTX_get_ciphers for the TLS <= 1.2 ciphers). Unless I missed this function actually existing with a possibly different name, it would be very cool if it were to be added.

Contributor guide

Research direction
Locate the internal storage of TLS 1.3 cipher suites in SSL CTX, implement a getter function that returns the string, add it to the public API and documentation.
Tech stack
c
Domain
security
Issue type
Feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
2
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
Half day
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
COpenSSL internals
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
60