summaryrefslogtreecommitdiff
path: root/lib/libssl
diff options
context:
space:
mode:
authorJoel Sing <jsing@cvs.openbsd.org>2016-11-06 13:11:41 +0000
committerJoel Sing <jsing@cvs.openbsd.org>2016-11-06 13:11:41 +0000
commit74e875864e77fef6f74c2db8a8ec7aca69268c39 (patch)
tree8d8dac96471dd72ea6b6b240f64e13bea108df1e /lib/libssl
parent78a8d34e5591dd0f3474578c42e8726f47ab9d0c (diff)
Adjust cipher suite strengths - move MD5 to LOW, RC4 to LOW and 3DES to
MEDIUM. ok beck@ bcook@
Diffstat (limited to 'lib/libssl')
-rw-r--r--lib/libssl/s3_lib.c26
1 files changed, 13 insertions, 13 deletions
diff --git a/lib/libssl/s3_lib.c b/lib/libssl/s3_lib.c
index 8a7a98507af..e66394a491b 100644
--- a/lib/libssl/s3_lib.c
+++ b/lib/libssl/s3_lib.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: s3_lib.c,v 1.111 2016/11/06 12:08:32 jsing Exp $ */
+/* $OpenBSD: s3_lib.c,v 1.112 2016/11/06 13:11:40 jsing Exp $ */
/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
* All rights reserved.
*
@@ -212,7 +212,7 @@ SSL_CIPHER ssl3_ciphers[] = {
.algorithm_enc = SSL_RC4,
.algorithm_mac = SSL_MD5,
.algorithm_ssl = SSL_SSLV3,
- .algo_strength = SSL_MEDIUM,
+ .algo_strength = SSL_LOW,
.algorithm2 = SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
.strength_bits = 128,
.alg_bits = 128,
@@ -228,7 +228,7 @@ SSL_CIPHER ssl3_ciphers[] = {
.algorithm_enc = SSL_RC4,
.algorithm_mac = SSL_SHA1,
.algorithm_ssl = SSL_SSLV3,
- .algo_strength = SSL_MEDIUM,
+ .algo_strength = SSL_LOW,
.algorithm2 = SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
.strength_bits = 128,
.alg_bits = 128,
@@ -260,7 +260,7 @@ SSL_CIPHER ssl3_ciphers[] = {
.algorithm_enc = SSL_3DES,
.algorithm_mac = SSL_SHA1,
.algorithm_ssl = SSL_SSLV3,
- .algo_strength = SSL_HIGH,
+ .algo_strength = SSL_MEDIUM,
.algorithm2 = SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
.strength_bits = 112,
.alg_bits = 168,
@@ -296,7 +296,7 @@ SSL_CIPHER ssl3_ciphers[] = {
.algorithm_enc = SSL_3DES,
.algorithm_mac = SSL_SHA1,
.algorithm_ssl = SSL_SSLV3,
- .algo_strength = SSL_HIGH,
+ .algo_strength = SSL_MEDIUM,
.algorithm2 = SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
.strength_bits = 112,
.alg_bits = 168,
@@ -328,7 +328,7 @@ SSL_CIPHER ssl3_ciphers[] = {
.algorithm_enc = SSL_3DES,
.algorithm_mac = SSL_SHA1,
.algorithm_ssl = SSL_SSLV3,
- .algo_strength = SSL_HIGH,
+ .algo_strength = SSL_MEDIUM,
.algorithm2 = SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
.strength_bits = 112,
.alg_bits = 168,
@@ -344,7 +344,7 @@ SSL_CIPHER ssl3_ciphers[] = {
.algorithm_enc = SSL_RC4,
.algorithm_mac = SSL_MD5,
.algorithm_ssl = SSL_SSLV3,
- .algo_strength = SSL_MEDIUM,
+ .algo_strength = SSL_LOW,
.algorithm2 = SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
.strength_bits = 128,
.alg_bits = 128,
@@ -376,7 +376,7 @@ SSL_CIPHER ssl3_ciphers[] = {
.algorithm_enc = SSL_3DES,
.algorithm_mac = SSL_SHA1,
.algorithm_ssl = SSL_SSLV3,
- .algo_strength = SSL_HIGH,
+ .algo_strength = SSL_MEDIUM,
.algorithm2 = SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
.strength_bits = 112,
.alg_bits = 168,
@@ -1137,7 +1137,7 @@ SSL_CIPHER ssl3_ciphers[] = {
.algorithm_enc = SSL_RC4,
.algorithm_mac = SSL_SHA1,
.algorithm_ssl = SSL_TLSV1,
- .algo_strength = SSL_MEDIUM,
+ .algo_strength = SSL_LOW,
.algorithm2 = SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
.strength_bits = 128,
.alg_bits = 128,
@@ -1153,7 +1153,7 @@ SSL_CIPHER ssl3_ciphers[] = {
.algorithm_enc = SSL_3DES,
.algorithm_mac = SSL_SHA1,
.algorithm_ssl = SSL_TLSV1,
- .algo_strength = SSL_HIGH,
+ .algo_strength = SSL_MEDIUM,
.algorithm2 = SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
.strength_bits = 112,
.alg_bits = 168,
@@ -1217,7 +1217,7 @@ SSL_CIPHER ssl3_ciphers[] = {
.algorithm_enc = SSL_RC4,
.algorithm_mac = SSL_SHA1,
.algorithm_ssl = SSL_TLSV1,
- .algo_strength = SSL_MEDIUM,
+ .algo_strength = SSL_LOW,
.algorithm2 = SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
.strength_bits = 128,
.alg_bits = 128,
@@ -1297,7 +1297,7 @@ SSL_CIPHER ssl3_ciphers[] = {
.algorithm_enc = SSL_RC4,
.algorithm_mac = SSL_SHA1,
.algorithm_ssl = SSL_TLSV1,
- .algo_strength = SSL_MEDIUM,
+ .algo_strength = SSL_LOW,
.algorithm2 = SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
.strength_bits = 128,
.alg_bits = 128,
@@ -1313,7 +1313,7 @@ SSL_CIPHER ssl3_ciphers[] = {
.algorithm_enc = SSL_3DES,
.algorithm_mac = SSL_SHA1,
.algorithm_ssl = SSL_TLSV1,
- .algo_strength = SSL_HIGH,
+ .algo_strength = SSL_MEDIUM,
.algorithm2 = SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
.strength_bits = 112,
.alg_bits = 168,