diff --git a/ssl/ssl_cipher.c b/ssl/ssl_cipher.c index 08a4e65c..6d48c89b 100644 --- a/ssl/ssl_cipher.c +++ b/ssl/ssl_cipher.c @@ -738,6 +738,9 @@ static const CIPHER_ALIAS kCipherAliases[] = { {"TLSv1", ~SSL_kCECPQ1, ~0u, ~SSL_eNULL, ~0u, SSL3_VERSION}, {"TLSv1.2", ~SSL_kCECPQ1, ~0u, ~SSL_eNULL, ~0u, TLS1_2_VERSION}, + /* AEAD-only ciphers for TLS 1.3. */ + {"GENERIC", SSL_kGENERIC, SSL_aGENERIC, ~0u, ~0u, 0}, + /* Legacy strength classes. */ {"HIGH", ~SSL_kCECPQ1, ~0u, ~SSL_eNULL, ~0u, 0}, {"FIPS", ~SSL_kCECPQ1, ~0u, ~SSL_eNULL, ~0u, 0}, diff --git a/ssl/ssl_test.cc b/ssl/ssl_test.cc index f6d17325..419cce56 100644 --- a/ssl/ssl_test.cc +++ b/ssl/ssl_test.cc @@ -269,6 +269,7 @@ static const char *kMustNotIncludeNull[] = { "SSLv3", "TLSv1", "TLSv1.2", + "GENERIC", }; static const char *kMustNotIncludeCECPQ1[] = { @@ -293,6 +294,7 @@ static const char *kMustNotIncludeCECPQ1[] = { "AES256", "AESGCM", "CHACHA20", + "GENERIC", }; static const CurveTest kCurveTests[] = {