[cpp-sp] branch main updated: Add TLS 1.3 cipher list.

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch main
in repository cpp-sp.

View the commit online:
https://codeberg.org/Shibboleth/cpp-sp/commit/07a374f4127b71b2ba1531225586dd23bcfe41db

The following commit(s) were added to refs/heads/main by this push:
     new 07a374f4 Add TLS 1.3 cipher list.
07a374f4 is described below

commit 07a374f4127b71b2ba1531225586dd23bcfe41db
Author: Scott Cantor <scott at restingparrotsoftware.com>
AuthorDate: Mon Aug 17 12:10:30 2026 -0400

    Add TLS 1.3 cipher list.
---
 shibsp/remoting/impl/CurlHTTPRemotingService.cpp | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/shibsp/remoting/impl/CurlHTTPRemotingService.cpp b/shibsp/remoting/impl/CurlHTTPRemotingService.cpp
index 16cd21a5..5d1e6e92 100644
--- a/shibsp/remoting/impl/CurlHTTPRemotingService.cpp
+++ b/shibsp/remoting/impl/CurlHTTPRemotingService.cpp
@@ -83,6 +83,7 @@ namespace {
         mutable int m_poolsize;
         mutable mutex m_lock;
         string m_ciphers;
+        string m_tls13_ciphers;
         bool m_chunked;
     };
 
@@ -185,9 +186,11 @@ CurlHTTPRemotingService::CurlHTTPRemotingService(ptree& pt) :
     m_curlInit = true;
 
     static const char CIPHER_LIST_PROP_NAME[] = "tlsCipherList";
+    static const char TLS13_CIPHER_LIST_PROP_NAME[] = "tls13CipherList";
     static const char CHUNKED_PROP_NAME[] = "chunkedEncoding";
     static const char TRACE_FILE_PROP_NAME[] = "traceFileBase";
 
+    static const char CIPHER_LIST_PROP_DEFAULT[] = "";
     static const char CIPHER_LIST_PROP_DEFAULT[] = "";
     static bool CHUNKED_PROP_DEFAULT = true;
     static const char TRACE_FILE_PROP_DEFAULT[] = "";
@@ -197,6 +200,7 @@ CurlHTTPRemotingService::CurlHTTPRemotingService(ptree& pt) :
 
     m_chunked = props.getBool(CHUNKED_PROP_NAME, CHUNKED_PROP_DEFAULT);
     m_ciphers = props.getString(CIPHER_LIST_PROP_NAME, CIPHER_LIST_PROP_DEFAULT);
+    m_tls13_ciphers = props.getString(TLS13_CIPHER_LIST_PROP_NAME, CIPHER_LIST_PROP_DEFAULT);
 
     if (getUserAgent() == nullptr) {
         string useragent = string(PACKAGE_NAME) + '/' + PACKAGE_VERSION;
@@ -283,6 +287,9 @@ CURL* CurlHTTPRemotingService::checkout() const
     if (!m_ciphers.empty()) {
         SHIB_CURL_SET(CURLOPT_SSL_CIPHER_LIST, m_ciphers.c_str());
     }
+    if (!m_tls13_ciphers.empty()) {
+        SHIB_CURL_SET(CURLOPT_TLS13_CIPHERS, m_tls13_ciphers.c_str());
+    }
     if (getCAFile()) {
         SHIB_CURL_SET(CURLOPT_CAINFO, getCAFile());
     }

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.