[openssl/openssl] b8590b: Add option `SSL_OP_PREFER_NO_DHE_KEX`, allowing th...

[Markus Minichmayr]

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: b8590b2f365a963965d799c438c5c92659c2fcae
      https://github.com/openssl/openssl/commit/b8590b2f365a963965d799c438c5c92659c2fcae
  Author: Markus Minichmayr <markus at tapkey.com>
  Date:   2023-11-24 (Fri, 24 Nov 2023)

  Changed paths:
    M apps/include/opt.h
    M include/openssl/ssl.h.in
    M ssl/ssl_conf.c
    M ssl/statem/extensions.c
    M ssl/statem/extensions_srvr.c
    M test/recipes/70-test_tls13kexmodes.t

  Log Message:
  -----------
  Add option `SSL_OP_PREFER_NO_DHE_KEX`, allowing the server to prefer non-dhe psk key exchange over psk with dhe (config file option `PreferNoDHEKEX`, server option `prefer_no_dhe_kex`).

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22794)


  Commit: 55d894bbfbb992482d4fbeac3b03f3bb5b2b258b
      https://github.com/openssl/openssl/commit/55d894bbfbb992482d4fbeac3b03f3bb5b2b258b
  Author: Markus Minichmayr <markus at tapkey.com>
  Date:   2023-11-24 (Fri, 24 Nov 2023)

  Changed paths:
    M doc/man1/openssl-s_client.pod.in
    M doc/man1/openssl-s_server.pod.in
    M doc/man3/SSL_CONF_cmd.pod
    M doc/man3/SSL_CTX_set_options.pod
    M doc/perlvars.pm

  Log Message:
  -----------
  Document `SSL_OP_PREFER_NO_DHE_KEX` option.

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22794)


  Commit: dfc836c346cc6001534eaf9ed3a151b7aa658335
      https://github.com/openssl/openssl/commit/dfc836c346cc6001534eaf9ed3a151b7aa658335
  Author: Markus Minichmayr <markus at tapkey.com>
  Date:   2023-11-24 (Fri, 24 Nov 2023)

  Changed paths:
    M CHANGES.md
    M doc/man3/SSL_CONF_cmd.pod

  Log Message:
  -----------
  PreferNoDHEKEX changelog and history anticipating inclusion in OpenSSL version 3.3.

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22794)


Compare: https://github.com/openssl/openssl/compare/40a24c20a809...dfc836c346cc