File disable-rc4-ciphers-bnc865241.diff of Package libqt5-qtbase

Overview Repositories Revisions Requests Users Attributes Meta

File disable-rc4-ciphers-bnc865241.diff of Package libqt5-qtbase

Index: qtbase-opensource-src-5.5.1/src/network/ssl/qsslsocket_openssl.cpp
===================================================================
--- qtbase-opensource-src-5.5.1.orig/src/network/ssl/qsslsocket_openssl.cpp
+++ qtbase-opensource-src-5.5.1/src/network/ssl/qsslsocket_openssl.cpp
@@ -662,10 +662,13 @@ void QSslSocketPrivate::resetDefaultCiph
                 // Unconditionally exclude ADH and AECDH ciphers since they offer no MITM protection
                 if (!ciph.name().toLower().startsWith(QLatin1String("adh")) &&
                     !ciph.name().toLower().startsWith(QLatin1String("exp-adh")) &&
-                    !ciph.name().toLower().startsWith(QLatin1String("aecdh")))
+                    !ciph.name().toLower().startsWith(QLatin1String("aecdh"))) {
                     ciphers << ciph;
-                if (ciph.usedBits() >= 128)
-                    defaultCiphers << ciph;
+
+                    if (ciph.usedBits() >= 128 &&
+                        !ciph.encryptionMethod().toLower().startsWith(QLatin1String("rc4")))
+                        defaultCiphers << ciph;
+                }
             }
         }
     }

Places

File disable-rc4-ciphers-bnc865241.diff of Package libqt5-qtbase

Places