~ubuntu-branches/ubuntu/precise/openssl/precise-updates

Viewing all changes in revision 91.

  • Committer: Package Import Robot
  • Author(s): Marc Deslauriers
  • Date: 2014-10-01 16:15:14 UTC
  • Revision ID: package-import@ubuntu.com-20141001161514-vv535ipmkagon7zu
Tags: 1.0.1-4ubuntu5.18
* SECURITY IMPROVEMENT: remove cipher length limitation that was set to
  work around problematic servers when using TLSv1.2 back in 2012.
  (LP: #1376447)
  - Although TLSv1.2 is disabled for clients by default, forcing it
    enabled would truncate the cipher list, possibly removing important
    ciphers, and was also breaking secure renegotiations.
  - debian/patches/tls12_workarounds.patch: remove
    OPENSSL_MAX_TLS1_2_CIPHER_LENGTH=50 from Configure.

expand all expand all

Show diffs side-by-side

added added

removed removed

Lines of Context: