-
Committer:
Package Import Robot
-
Author(s):
Marc Deslauriers
-
Date:
2014-10-01 16:15:14 UTC
-
Revision ID:
package-import@ubuntu.com-20141001161514-vv535ipmkagon7zu
Tags: 1.0.1-4ubuntu5.18
* SECURITY IMPROVEMENT: remove cipher length limitation that was set to
work around problematic servers when using TLSv1.2 back in 2012.
(LP: #1376447)
- Although TLSv1.2 is disabled for clients by default, forcing it
enabled would truncate the cipher list, possibly removing important
ciphers, and was also breaking secure renegotiations.
- debian/patches/tls12_workarounds.patch: remove
OPENSSL_MAX_TLS1_2_CIPHER_LENGTH=50 from Configure.