fc90bdbaf9
Joshua Rogers
2026-05-22
Subject
schannel: error on TLS 1.3-only with cipher list
Binary
No binary (build failed)
Architecture & Compiler Flags
—
Build Log
(log yok)
Commit Diff GitHub →
lib/vtls/schannel.c+5 -0
| @@ -654,6 +654,11 @@ static CURLcode acquire_sspi_handle(struct Curl_cfilter *cf, | |
| if(ciphers) { | |
| if((enabled_protocols & SP_PROT_TLS1_3_CLIENT)) { | |
| + | if(!(enabled_protocols & ~SP_PROT_TLS1_3_CLIENT)) { |
| + | failf(data, "schannel: TLS 1.3 is not supported with a cipher list; " |
| + | "remove the cipher list or allow a lower TLS version"); |
| + | return CURLE_SSL_CONNECT_ERROR; |
| + | } |
| infof(data, "schannel: WARNING: This version of Schannel " | |
| "negotiates a less-secure TLS version than TLS 1.3 because the " | |
| "user set an algorithm cipher list."); | |