<html> <head> <meta content="text/html; charset=UTF-8" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> pushed to DOGTAG_10_2_BRANCH (for later cherry picking), as planned commit <a href="https://fedorahosted.org/pki/changeset/67c895851781d69343979cbcff138184803880ea/" class="changeset" title="Ticket #1556 Weak HTTPS TLS ciphers This patch fixes the RSA ciphers that ...">67c895851781d69343979cbcff138184803880ea</a> thanks, Christina <div class="moz-cite-prefix">On 08/14/2015 07:51 PM, John Magne wrote: </div> <blockquote cite="mid:1354297048.15321558.1439607114139.JavaMail.zimbra@redhat.com" type="cite"> <pre wrap="">ACK, based on the fact that is has been tested to work, and that BobR has approved all the ciphers. ----- Original Message ----- From: "Christina Fu" <a class="moz-txt-link-rfc2396E" href="mailto:cfu@redhat.com"><cfu@redhat.com></a> To: "pki-devel" <a class="moz-txt-link-rfc2396E" href="mailto:pki-devel@redhat.com"><pki-devel@redhat.com></a> Sent: Friday, 14 August, 2015 6:34:15 PM Subject: [Pki-devel] [PATCH] Ticket #1556 Weak HTTPS TLS ciphers (this patch overrides the preliminary one sent out yesterday) <a class="moz-txt-link-freetext" href="https://fedorahosted.org/pki/ticket/1556">https://fedorahosted.org/pki/ticket/1556</a> Please note that the cipher lists can be considered to be ack'ed by Bob Relyea as it incorporates feedback directly from him. All changes have been tested to work for both RSA and ECC servers. Ticket #1556 Weak HTTPS TLS ciphers This patch fixes the RSA ciphers that were mistakenly turned on under ECC section, and off under RSA section. A few adjustments have also been made based on Bob Relyea's feedback. A new file, <instance>/conf/ciphers.info was also created to 1. provide info on the ciphers 2. provide default rsa and ecc ciphers for admins to incorporate into earlier instances (as migration script might not be ideal due to possible customization) thanks, Christina _______________________________________________ Pki-devel mailing list <a class="moz-txt-link-abbreviated" href="mailto:Pki-devel@redhat.com">Pki-devel@redhat.com</a> <a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/pki-devel">https://www.redhat.com/mailman/listinfo/pki-devel</a> </pre> </blockquote> </body> </html>