]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph.git/commit
rgw/beast: add ssl_ciphersuites option for tls 1.3 68934/head
authorCasey Bodley <cbodley@redhat.com>
Fri, 15 May 2026 14:40:50 +0000 (10:40 -0400)
committerCasey Bodley <cbodley@redhat.com>
Fri, 15 May 2026 14:43:12 +0000 (10:43 -0400)
commitc62f537f2c99513ef04595c748d392e9da36a7fd
treeca3e2b56e541b3fbb36318961087ce21ba8aa332
parent76152dcc1b11987510c1007b64ae7cc61bd391e6
rgw/beast: add ssl_ciphersuites option for tls 1.3

the existing ssl_ciphers option is passed to `SSL_CTX_set_cipher_list()`
which only applies to "TLSv1.2 and below". there's a separate
`SSL_CTX_set_ciphersuites()` for TLSv1.3

because the frontend's default configuration for `ssl_options` accepts
both 1.2 and 1.3, users may need to specify ciphers for each. that's why
`ssl_ciphersuites` is introduced as a separate option

Fixes: https://tracker.ceph.com/issues/76578
Signed-off-by: Casey Bodley <cbodley@redhat.com>
doc/radosgw/frontends.rst
src/rgw/rgw_asio_frontend.cc