[Pkg-openssl-devel] Bug#779669: Bug#779669: OpenSSL: consider completely disabling EXPORT cipher suites

[Kurt Roeckx]

On Wed, Mar 04, 2015 at 10:16:31AM +0200, Török Edwin wrote:
> On 03/04/2015 07:10 AM, Kurt Roeckx wrote:
> > On Tue, Mar 03, 2015 at 10:45:41PM +0200, Török Edwin wrote:
> >> can you consider disabling the export suites in OpenSSL like LibreSSL did, and
> >> like you've done for SSLv3?
> > 
> > I do want to remove the export ciphers from the DEFAULT cipher
> > string in all released branches.  I have patches upstream to do
> > that, and to completly remove support for export ciphers in
> > master.
> 
> Nice!
> 
> > 
> >> [2] https://github.com/libressl-
> >> portable/openbsd/commit/9e3c8206e0f32386e79956dfa4a26bbfdb3dd10d
> >> [4] https://github.com/libressl-
> >> portable/openbsd/commit/9e3c8206e0f32386e79956dfa4a26bbfdb3dd10d
> > 
> > That's the same link.
> 
> Sorry, the other link was supposed to be this that removes the ephemeral RSA:
> https://github.com/libressl-portable/openbsd/commit/b0a3dc11e2f40da00441447a359ed16e8c578e44

That's still only 3 distinc URLs.


Kurt