Clean up SSL_HANDSHAKE_MAC_DEFAULT.
authorjsing <jsing@openbsd.org>
Tue, 16 Jul 2024 14:38:04 +0000 (14:38 +0000)
committerjsing <jsing@openbsd.org>
Tue, 16 Jul 2024 14:38:04 +0000 (14:38 +0000)
commiteb67a850e980864f720bbc919ebc239ae0ab92d9
tree6918cb7ed6c2f2e9aa3ee99e2072b59e7d8b1e8e
parentbf08afbe4137b3e1a86218881f96ef9d07b8f07e
Clean up SSL_HANDSHAKE_MAC_DEFAULT.

The handshake MAC needs to be upgraded when TLSv1.0 and TLSv1.1
ciphersuites are used with TLSv1.2. Since we no longer support TLSv1.0
and TLSv1.1, we can simply upgrade the handshake MAC in the ciphersuite
table and remove the various defines/macros/code that existed to handle
the upgrade.

ok tb@
lib/libssl/s3_lib.c
lib/libssl/ssl_ciph.c
lib/libssl/ssl_local.h