diff options
| author | Vitezslav Cizek <vcizek@suse.com> | 2016-10-10 16:41:57 +0200 |
|---|---|---|
| committer | Rich Salz <rsalz@openssl.org> | 2016-10-14 11:32:14 -0400 |
| commit | 9d9e0535366b4e5cfb2eb4d74be6b3d546b98fe8 (patch) | |
| tree | 98cc435107a029eedd9fc5a1c5d7f49c76b0eb42 | |
| parent | 329a5f361513154ebfbd616c79b628750df16de1 (diff) | |
Degrade 3DES to MEDIUM in SSL2
The SWEET32 fix moved 3DES from HIGH to MEDIUM, but omitted SSL2.
CLA: trivial
Reviewed-by: Kurt Roeckx <kurt@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/1683)
(cherry picked from commit 6d69dc56de8f0535be9ccabea7a8d4e61c04c2f1)
| -rw-r--r-- | ssl/s2_lib.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/ssl/s2_lib.c b/ssl/s2_lib.c index 7bcb81a11e..0322dc8136 100644 --- a/ssl/s2_lib.c +++ b/ssl/s2_lib.c @@ -254,7 +254,7 @@ OPENSSL_GLOBAL const SSL_CIPHER ssl2_ciphers[] = { SSL_3DES, SSL_MD5, SSL_SSLV2, - SSL_NOT_DEFAULT | SSL_NOT_EXP | SSL_HIGH, + SSL_NOT_DEFAULT | SSL_NOT_EXP | SSL_MEDIUM, 0, 112, 168, |