From 8fc469c350154763f0d833030a1a770c1b854376 Mon Sep 17 00:00:00 2001 From: Joel Sing Date: Mon, 28 Aug 2017 18:12:11 +0000 Subject: ECDHE-RSA-DES-CBC3-SHA should not be marked HIGH. Spotted by Andreas Bartelt --- lib/libssl/s3_lib.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/libssl/s3_lib.c b/lib/libssl/s3_lib.c index bbf0444c212..ab92ebf36a1 100644 --- a/lib/libssl/s3_lib.c +++ b/lib/libssl/s3_lib.c @@ -1,4 +1,4 @@ -/* $OpenBSD: s3_lib.c,v 1.159 2017/08/28 16:37:04 jsing Exp $ */ +/* $OpenBSD: s3_lib.c,v 1.160 2017/08/28 18:12:10 jsing Exp $ */ /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) * All rights reserved. * @@ -1040,7 +1040,7 @@ SSL_CIPHER ssl3_ciphers[] = { .algorithm_enc = SSL_3DES, .algorithm_mac = SSL_SHA1, .algorithm_ssl = SSL_TLSV1, - .algo_strength = SSL_HIGH, + .algo_strength = SSL_MEDIUM, .algorithm2 = SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF, .strength_bits = 112, .alg_bits = 168, -- cgit v1.2.3