@@ -464,10 +464,10 @@ const struct s2n_security_policy security_policy_cloudfront_tls_1_0_2014_pq_beta
464464
465465const struct s2n_security_policy security_policy_cloudfront_tls_1_0_2014_sha256 = {
466466 .minimum_protocol_version = S2N_TLS10 ,
467- .cipher_preferences = & cipher_preferences_cloudfront_tls_1_0_2014_sha256 ,
468- .kem_preferences = & kem_preferences_pq_tls_1_3_ietf_2024_10 ,
469- .signature_preferences = & s2n_signature_preferences_20200207 ,
470- .ecc_preferences = & s2n_ecc_preferences_20200310 ,
467+ .cipher_preferences = & cipher_preferences_cloudfront_tls_1_0_2014_sha256 ,
468+ .kem_preferences = & kem_preferences_pq_tls_1_3_ietf_2024_10 ,
469+ .signature_preferences = & s2n_signature_preferences_20200207 ,
470+ .ecc_preferences = & s2n_ecc_preferences_20200310 ,
471471};
472472
473473const struct s2n_security_policy security_policy_cloudfront_tls_1_0_2016 = {
@@ -607,10 +607,10 @@ const struct s2n_security_policy security_policy_cloudfront_tls_1_0_2014_no_pq =
607607
608608const struct s2n_security_policy security_policy_cloudfront_tls_1_0_2014_sha256_no_pq = {
609609 .minimum_protocol_version = S2N_TLS10 ,
610- .cipher_preferences = & cipher_preferences_cloudfront_tls_1_0_2014_sha256 ,
611- .kem_preferences = & kem_preferences_null ,
612- .signature_preferences = & s2n_signature_preferences_20200207 ,
613- .ecc_preferences = & s2n_ecc_preferences_20200310 ,
610+ .cipher_preferences = & cipher_preferences_cloudfront_tls_1_0_2014_sha256 ,
611+ .kem_preferences = & kem_preferences_null ,
612+ .signature_preferences = & s2n_signature_preferences_20200207 ,
613+ .ecc_preferences = & s2n_ecc_preferences_20200310 ,
614614};
615615
616616const struct s2n_security_policy security_policy_cloudfront_tls_1_0_2016_no_pq = {
@@ -1643,7 +1643,7 @@ struct s2n_security_policy_selection security_policy_selection[] = {
16431643 /* CloudFront Viewer Facing */
16441644 { .version = "CloudFront-SSL-v-3" , .security_policy = & security_policy_cloudfront_ssl_v_3 , .ecc_extension_required = 0 , .pq_kem_extension_required = 0 },
16451645 { .version = "CloudFront-TLS-1-0-2014" , .security_policy = & security_policy_cloudfront_tls_1_0_2014 , .ecc_extension_required = 0 , .pq_kem_extension_required = 0 },
1646- { .version = "CloudFront-TLS-1-0-2014-sha256" , .security_policy = & security_policy_cloudfront_tls_1_0_2014_sha256 , .ecc_extension_required = 0 , .pq_kem_extension_required = 0 },
1646+ { .version = "CloudFront-TLS-1-0-2014-sha256" , .security_policy = & security_policy_cloudfront_tls_1_0_2014_sha256 , .ecc_extension_required = 0 , .pq_kem_extension_required = 0 },
16471647 { .version = "CloudFront-TLS-1-0-2016" , .security_policy = & security_policy_cloudfront_tls_1_0_2016 , .ecc_extension_required = 0 , .pq_kem_extension_required = 0 },
16481648 { .version = "CloudFront-TLS-1-1-2016" , .security_policy = & security_policy_cloudfront_tls_1_1_2016 , .ecc_extension_required = 0 , .pq_kem_extension_required = 0 },
16491649 { .version = "CloudFront-TLS-1-2-2017" , .security_policy = & security_policy_cloudfront_tls_1_2_2017 , .ecc_extension_required = 0 , .pq_kem_extension_required = 0 },
@@ -1655,7 +1655,7 @@ struct s2n_security_policy_selection security_policy_selection[] = {
16551655 /* CloudFront Non-PQ Viewer Facing */
16561656 { .version = "CloudFront-SSL-v-3-no-pq" , .security_policy = & security_policy_cloudfront_ssl_v_3_no_pq , .ecc_extension_required = 0 , .pq_kem_extension_required = 0 },
16571657 { .version = "CloudFront-TLS-1-0-2014-no-pq" , .security_policy = & security_policy_cloudfront_tls_1_0_2014_no_pq , .ecc_extension_required = 0 , .pq_kem_extension_required = 0 },
1658- { .version = "CloudFront-TLS-1-0-2014-sha256-no-pq" , .security_policy = & security_policy_cloudfront_tls_1_0_2014_sha256_no_pq , .ecc_extension_required = 0 , .pq_kem_extension_required = 0 },
1658+ { .version = "CloudFront-TLS-1-0-2014-sha256-no-pq" , .security_policy = & security_policy_cloudfront_tls_1_0_2014_sha256_no_pq , .ecc_extension_required = 0 , .pq_kem_extension_required = 0 },
16591659 { .version = "CloudFront-TLS-1-0-2016-no-pq" , .security_policy = & security_policy_cloudfront_tls_1_0_2016_no_pq , .ecc_extension_required = 0 , .pq_kem_extension_required = 0 },
16601660 { .version = "CloudFront-TLS-1-1-2016-no-pq" , .security_policy = & security_policy_cloudfront_tls_1_1_2016_no_pq , .ecc_extension_required = 0 , .pq_kem_extension_required = 0 },
16611661 { .version = "CloudFront-TLS-1-2-2017-no-pq" , .security_policy = & security_policy_cloudfront_tls_1_2_2017_no_pq , .ecc_extension_required = 0 , .pq_kem_extension_required = 0 },
@@ -1667,7 +1667,7 @@ struct s2n_security_policy_selection security_policy_selection[] = {
16671667 /* CloudFront Unofficial Viewer Facing */
16681668 { .version = "CloudFront-TLS-1-0-2014-PQ-Beta" , .security_policy = & security_policy_cloudfront_tls_1_0_2014_pq_beta , .ecc_extension_required = 0 , .pq_kem_extension_required = 0 },
16691669 { .version = "CloudFront-TLS-1-2-2021-no-sha1-PQ-Beta" , .security_policy = & security_policy_cloudfront_tls_1_2_2021_no_sha1_pq_beta , .ecc_extension_required = 0 , .pq_kem_extension_required = 0 },
1670- { .version = "CloudFront-TLS-1-2-2018-Beta" , .security_policy = & security_policy_cloudfront_tls_1_2_2018_beta , .ecc_extension_required = 0 , .pq_kem_extension_required = 0 },
1670+ { .version = "CloudFront-TLS-1-2-2018-Beta" , .security_policy = & security_policy_cloudfront_tls_1_2_2018_beta , .ecc_extension_required = 0 , .pq_kem_extension_required = 0 },
16711671 { .version = "CloudFront-TLS-1-2-2021-Chacha20-Boosted" , .security_policy = & security_policy_cloudfront_tls_1_2_2021_chacha20_boosted , .ecc_extension_required = 0 , .pq_kem_extension_required = 0 },
16721672 /* CloudFront Legacy policies */
16731673 { .version = "CloudFront-SSL-v-3-Legacy" , .security_policy = & security_policy_cloudfront_ssl_v_3_legacy , .ecc_extension_required = 0 , .pq_kem_extension_required = 0 },
0 commit comments