]> git.ipfire.org Git - thirdparty/squid.git/commit - src/ssl/support.cc
Bug 4599 pt4: Disable RSA weak ephemeral key exchange for OpenSSL-1.1
authorChristos Tsantilas <chtsanti@users.sourceforge.net>
Fri, 30 Dec 2016 08:40:21 +0000 (21:40 +1300)
committerAmos Jeffries <squid3@treenet.co.nz>
Fri, 30 Dec 2016 08:40:21 +0000 (21:40 +1300)
commitb7afb10fcd466b29fd891b54a6e7c8b4532c5ea1
tree2f833ee882a180bbe7fa9ebf8e84a939aa7db003
parenta0b240cd9f515029e1883542c1728fae7eb45a07
Bug 4599 pt4: Disable RSA weak ephemeral key exchange for OpenSSL-1.1

From OpenSSL  changeLog:
     Remove support for all 40 and 56 bit ciphers.  This includes all the export
     ciphers who are no longer supported and drops support the ephemeral RSA key
     exchange. The LOW ciphers currently doesn't have any ciphers in it.
     [Kurt Roeckx]

OpenSSL 1.1.0  drops EXPORT ciphers and ephemeral RSA. The ssl_temp_rsa_cb used
here. The OpenSSL manual for this function is:
  https://wiki.openssl.org/index.php/Manual:SSL_CTX_set_tmp_rsa_callback(3)
src/ssl/support.cc