|
 |
154a6e |
From 6bf887340626e35e0497deaf246a9f034d8fe8ee Mon Sep 17 00:00:00 2001
|
|
|
154a6e |
From: Rob Crittenden <rcritten@redhat.com>
|
|
|
154a6e |
Date: Mon, 23 May 2016 17:21:11 -0400
|
|
|
154a6e |
Subject: [PATCH] Add back export and low-security ciphers
|
|
|
154a6e |
|
|
|
154a6e |
These are disabled in OpenSSL 1.02g but are still enabled in
|
|
|
154a6e |
the version in RHEL 7.
|
|
|
154a6e |
---
|
|
|
154a6e |
test/test_cipher.py | 5 ++---
|
|
|
154a6e |
1 file changed, 2 insertions(+), 3 deletions(-)
|
|
|
154a6e |
|
|
|
154a6e |
diff --git a/test/test_cipher.py b/test/test_cipher.py
|
|
|
154a6e |
index 1cce9e4..8b12f26 100644
|
|
|
154a6e |
--- a/test/test_cipher.py
|
|
|
154a6e |
+++ b/test/test_cipher.py
|
|
|
154a6e |
@@ -40,7 +40,7 @@ if ENABLE_SERVER_DHE == 0:
|
|
|
154a6e |
OPENSSL_CIPHERS_IGNORE += ':-DH'
|
|
|
154a6e |
|
|
|
154a6e |
def assert_equal_openssl(ciphers):
|
|
|
154a6e |
- nss_ciphers = ciphers + ":-EXP:-LOW"
|
|
|
154a6e |
+ nss_ciphers = ciphers
|
|
|
154a6e |
ossl_ciphers = ciphers + OPENSSL_CIPHERS_IGNORE
|
|
|
154a6e |
(nss, err, rc) = run([exe, "--o", nss_ciphers])
|
|
|
154a6e |
assert rc == 0
|
|
|
154a6e |
@@ -270,8 +270,7 @@ class test_ciphers(object):
|
|
|
154a6e |
assert_no_NULL("DEFAULT:aRSA")
|
|
|
154a6e |
|
|
|
154a6e |
def test_SYSTEM_DEFAULT(self):
|
|
|
154a6e |
- # I've added in !DHE here which differs from F-23 default
|
|
|
154a6e |
- assert_equal_openssl("!SSLv2:kEECDH:kRSA:kEDH:kPSK:+3DES:!aNULL:!eNULL:!MD5:!EXP:!RC4:!SEED:!IDEA:!DES:!DHE")
|
|
|
154a6e |
+ assert_equal_openssl("!SSLv2:kEECDH:kRSA:kEDH:kPSK:DH:+3DES:!aNULL:!eNULL:!MD5:!EXP:!RC4:!SEED:!IDEA:!DES")
|
|
|
154a6e |
|
|
|
154a6e |
def test_cipher_reorder(self):
|
|
|
154a6e |
# re-ordering now allowed but shouldn't blow up either
|
|
|
154a6e |
--
|
|
|
154a6e |
2.5.5
|
|
|
154a6e |
|