Re: F23 System Wide Change: Disable SSL3 and RC4 by default

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, Apr 28, 2015 at 04:51:32PM +0200, Nikos Mavrogiannopoulos wrote:
> The plan is to allow re-enabling by switching the system to legacy
> crypto policy. That would work for RC4. For SSL 3.0, since OpenSSL
> doesn't provide knobs to enable or disable on runtime, that will not be
> possible. However, according to Tomas Mraz openssl already disables SSL
> 3.0 in F22, and there were no major issues reported so that would be no
> issue.

Could you please clarify it in the "Upgrade/compatibility impact" part
of the change proposal? The current text is cryptic and having some
clear information about this plan will be useful.

Thanks,
Debarshi

Attachment: pgpT1TETEsl1E.pgp
Description: PGP signature

-- 
devel mailing list
devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux