Commit 15ed7c1e4e for openssl.org
commit 15ed7c1e4e9c938cb2fa055de4fc59619311fe9f
Author: Viktor Dukhovni <viktor@openssl.org>
Date: Sat Sep 5 00:39:47 2026 +1000
Add overlooked DTLS min/max version bounds for SM4
Reviewed-by: Tomas Mraz <tomas@openssl.foundation>
Reviewed-by: Matt Caswell <matt@openssl.foundation>
Reviewed-by: Nikola Pajkovsky <nikolap@openssl.org>
MergeDate: Wed Sep 23 14:46:50 2026
(Merged from https://github.com/openssl/openssl/pull/32681)
diff --git a/ssl/s3_lib.c b/ssl/s3_lib.c
index 83b4b560bc..af320478bf 100644
--- a/ssl/s3_lib.c
+++ b/ssl/s3_lib.c
@@ -182,8 +182,8 @@ static SSL_CIPHER tls13_ciphers[] = {
SSL_AEAD,
TLS1_3_VERSION,
TLS1_3_VERSION,
- 0,
- 0,
+ DTLS1_3_VERSION,
+ DTLS1_3_VERSION,
SSL_NOT_DEFAULT | SSL_HIGH,
SSL_HANDSHAKE_MAC_SM3,
128,
@@ -200,8 +200,8 @@ static SSL_CIPHER tls13_ciphers[] = {
SSL_AEAD,
TLS1_3_VERSION,
TLS1_3_VERSION,
- 0,
- 0,
+ DTLS1_3_VERSION,
+ DTLS1_3_VERSION,
SSL_NOT_DEFAULT | SSL_HIGH,
SSL_HANDSHAKE_MAC_SM3,
128,