]> git.ipfire.org Git - thirdparty/squid.git/commit
Bug 4599 pt4: Disable RSA weak ephemeral key exchange for OpenSSL-1.1
authorChristos Tsantilas <chtsanti@users.sourceforge.net>
Sat, 31 Dec 2016 02:44:41 +0000 (15:44 +1300)
committerAmos Jeffries <squid3@treenet.co.nz>
Sat, 31 Dec 2016 02:44:41 +0000 (15:44 +1300)
commitb2984a68d9b59e20e44d6800d373a21945ab875b
tree724f5304d62be8ad41ffd5d478b0197bffaf4550
parentf5078e0ebff3bfeda04567c16b882bea40a0dabe
Bug 4599 pt4: Disable RSA weak ephemeral key exchange for OpenSSL-1.1

From OpenSSL  changeLog:
     Remove support for all 40 and 56 bit ciphers.  This includes all the export
     ciphers who are no longer supported and drops support the ephemeral RSA key
     exchange. The LOW ciphers currently doesn't have any ciphers in it.
     [Kurt Roeckx]

OpenSSL 1.1.0  drops EXPORT ciphers and ephemeral RSA. The ssl_temp_rsa_cb used
here. The OpenSSL manual for this function is:
  https://wiki.openssl.org/index.php/Manual:SSL_CTX_set_tmp_rsa_callback(3)
src/ssl/support.cc