File openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch of Package compat-openssl098.4153

Overview Repositories Revisions Requests Users Attributes Meta

File openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch of Package compat-openssl098.4153

commit 9d9e0535366b4e5cfb2eb4d74be6b3d546b98fe8
Author: Vitezslav Cizek <vcizek@suse.com>
Date:   Mon Oct 10 16:41:57 2016 +0200

Degrade 3DES to MEDIUM in SSL2
    
    The SWEET32 fix moved 3DES from HIGH to MEDIUM, but omitted SSL2.
    
    CLA: trivial
    Reviewed-by: Kurt Roeckx <kurt@openssl.org>
    Reviewed-by: Matt Caswell <matt@openssl.org>
    Reviewed-by: Rich Salz <rsalz@openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/1683)
    
    (cherry picked from commit 6d69dc56de8f0535be9ccabea7a8d4e61c04c2f1)

Index: openssl-0.9.8j/ssl/s2_lib.c
===================================================================
--- openssl-0.9.8j.orig/ssl/s2_lib.c	2017-02-06 17:23:29.627481156 +0100
+++ openssl-0.9.8j/ssl/s2_lib.c	2017-02-06 17:25:36.225298790 +0100
@@ -170,7 +170,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl2_ciphers[]
 	SSL2_TXT_DES_192_EDE3_CBC_WITH_MD5,
 	SSL2_CK_DES_192_EDE3_CBC_WITH_MD5,
 	SSL_kRSA|SSL_aRSA|SSL_3DES|SSL_MD5|SSL_SSLV2,
-	SSL_NOT_EXP|SSL_HIGH,
+	SSL_NOT_EXP|SSL_MEDIUM,
 	0,
 	168,
 	168,

Places

File openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch of Package compat-openssl098.4153

Places