Blame openssl-1.1.0-weak-ciphers.patch
|
 |
5de6bbd |
diff -up openssl-1.1.0f/ssl/s3_lib.c.weak-ciphers openssl-1.1.0f/ssl/s3_lib.c
|
|
|
5de6bbd |
--- openssl-1.1.0f/ssl/s3_lib.c.weak-ciphers 2017-05-25 14:46:20.000000000 +0200
|
|
|
5de6bbd |
+++ openssl-1.1.0f/ssl/s3_lib.c 2017-06-15 15:12:51.555142528 +0200
|
|
|
5de6bbd |
@@ -2425,7 +2425,7 @@ static SSL_CIPHER ssl3_ciphers[] = {
|
|
|
5de6bbd |
SSL_GOST89MAC,
|
|
|
5de6bbd |
TLS1_VERSION, TLS1_2_VERSION,
|
|
|
5de6bbd |
0, 0,
|
|
|
5de6bbd |
- SSL_HIGH,
|
|
|
5de6bbd |
+ SSL_MEDIUM,
|
|
|
5de6bbd |
SSL_HANDSHAKE_MAC_GOST94 | TLS1_PRF_GOST94 | TLS1_STREAM_MAC,
|
|
|
5de6bbd |
256,
|
|
|
5de6bbd |
256,
|
|
|
5de6bbd |
@@ -2455,7 +2455,7 @@ static SSL_CIPHER ssl3_ciphers[] = {
|
|
|
5de6bbd |
SSL_GOST89MAC12,
|
|
|
5de6bbd |
TLS1_VERSION, TLS1_2_VERSION,
|
|
|
5de6bbd |
0, 0,
|
|
|
5de6bbd |
- SSL_HIGH,
|
|
|
5de6bbd |
+ SSL_MEDIUM,
|
|
|
5de6bbd |
SSL_HANDSHAKE_MAC_GOST12_256 | TLS1_PRF_GOST12_256 | TLS1_STREAM_MAC,
|
|
|
5de6bbd |
256,
|
|
|
5de6bbd |
256,
|
|
|
5de6bbd |
@@ -2558,7 +2558,7 @@ static SSL_CIPHER ssl3_ciphers[] = {
|
|
|
5de6bbd |
},
|
|
|
5de6bbd |
#endif /* OPENSSL_NO_SEED */
|
|
|
5de6bbd |
|
|
|
5de6bbd |
-#ifndef OPENSSL_NO_WEAK_SSL_CIPHERS
|
|
|
5de6bbd |
+#if 0 /* No RC4 */
|
|
|
5de6bbd |
{
|
|
|
5de6bbd |
1,
|
|
|
5de6bbd |
SSL3_TXT_RSA_RC4_128_MD5,
|