e665925
diff -up openssl-1.0.2j/ssl/s3_lib.c.downgrade-strength openssl-1.0.2j/ssl/s3_lib.c
e665925
--- openssl-1.0.2j/ssl/s3_lib.c.downgrade-strength	2017-01-05 17:23:21.091203023 +0100
e665925
+++ openssl-1.0.2j/ssl/s3_lib.c	2017-01-05 17:36:37.250194225 +0100
e665925
@@ -227,7 +227,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]
e665925
      SSL_SSLV3,
e665925
      SSL_NOT_EXP | SSL_MEDIUM,
e665925
      SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
e665925
-     128,
e665925
+     112,
e665925
      128,
e665925
      },
e665925
 
e665925
@@ -243,7 +243,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]
e665925
      SSL_SSLV3,
e665925
      SSL_NOT_EXP | SSL_MEDIUM,
e665925
      SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
e665925
-     128,
e665925
+     112,
e665925
      128,
e665925
      },
e665925
 
e665925
@@ -278,7 +278,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]
e665925
      SSL_SSLV3,
e665925
      SSL_NOT_EXP | SSL_MEDIUM,
e665925
      SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
e665925
-     128,
e665925
+     112,
e665925
      128,
e665925
      },
e665925
 #endif
e665925
@@ -575,7 +575,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]
e665925
      SSL_SSLV3,
e665925
      SSL_NOT_DEFAULT | SSL_NOT_EXP | SSL_MEDIUM,
e665925
      SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
e665925
-     128,
e665925
+     112,
e665925
      128,
e665925
      },
e665925
 
e665925
@@ -730,7 +730,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]
e665925
      SSL_SSLV3,
e665925
      SSL_NOT_EXP | SSL_MEDIUM,
e665925
      SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
e665925
-     128,
e665925
+     112,
e665925
      128,
e665925
      },
e665925
 
e665925
@@ -746,7 +746,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]
e665925
      SSL_SSLV3,
e665925
      SSL_NOT_EXP | SSL_MEDIUM,
e665925
      SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
e665925
-     128,
e665925
+     112,
e665925
      128,
e665925
      },
e665925
 
e665925
@@ -796,7 +796,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]
e665925
      SSL_SSLV3,
e665925
      SSL_NOT_EXP | SSL_MEDIUM,
e665925
      SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
e665925
-     128,
e665925
+     112,
e665925
      128,
e665925
      },
e665925
 
e665925
@@ -812,7 +812,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]
e665925
      SSL_SSLV3,
e665925
      SSL_NOT_EXP | SSL_MEDIUM,
e665925
      SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
e665925
-     128,
e665925
+     112,
e665925
      128,
e665925
      },
e665925
 
e665925
@@ -1429,7 +1429,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]
e665925
      SSL_TLSV1,
e665925
      SSL_NOT_EXP | SSL_MEDIUM,
e665925
      SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
e665925
-     128,
e665925
+     112,
e665925
      128,
e665925
      },
e665925
 #endif
e665925
@@ -1714,7 +1714,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]
e665925
      SSL_TLSV1,
e665925
      SSL_NOT_EXP | SSL_MEDIUM,
e665925
      SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
e665925
-     128,
e665925
+     112,
e665925
      128,
e665925
      },
e665925
 
e665925
@@ -2106,7 +2106,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]
e665925
      SSL_TLSV1,
e665925
      SSL_NOT_EXP | SSL_MEDIUM,
e665925
      SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
e665925
-     128,
e665925
+     112,
e665925
      128,
e665925
      },
e665925
 
e665925
@@ -2186,7 +2186,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]
e665925
      SSL_TLSV1,
e665925
      SSL_NOT_EXP | SSL_MEDIUM,
e665925
      SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
e665925
-     128,
e665925
+     112,
e665925
      128,
e665925
      },
e665925
 
e665925
@@ -2266,7 +2266,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]
e665925
      SSL_TLSV1,
e665925
      SSL_NOT_EXP | SSL_MEDIUM,
e665925
      SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
e665925
-     128,
e665925
+     112,
e665925
      128,
e665925
      },
e665925
 
e665925
@@ -2346,7 +2346,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]
e665925
      SSL_TLSV1,
e665925
      SSL_NOT_EXP | SSL_MEDIUM,
e665925
      SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
e665925
-     128,
e665925
+     112,
e665925
      128,
e665925
      },
e665925
 
e665925
@@ -2426,7 +2426,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]
e665925
      SSL_TLSV1,
e665925
      SSL_NOT_DEFAULT | SSL_NOT_EXP | SSL_MEDIUM,
e665925
      SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
e665925
-     128,
e665925
+     112,
e665925
      128,
e665925
      },
e665925