|
https://fedorahosted.org/389/ticket/47838 Thanks to Ludwig and Rich for their comments. I've updated the patch on ssl.c as well as the testcase based upon them. https://fedorahosted.org/389/attachment/ticket/47838/0001-Ticket-47838-harden-the-list-of-ciphers-available-by.patch git patch file (master) -- revised; As pointed out in comment:7, disable all ciphers if nsSSL3Cipher does not exist or empty. https://fedorahosted.org/389/attachment/ticket/47838/0002-Ticket-47838-CI-test-add-test-case-for-ticket-47838.patch git patch file (master) -- revised; Added more test cases. |
-- 389-devel mailing list 389-devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/389-devel
