[Pki-devel] [PATCH] Ticket #1556 Weak HTTPS TLS ciphers

[Christina Fu]

(this patch overrides the preliminary one sent out yesterday)
https://fedorahosted.org/pki/ticket/1556

Please note that the cipher lists can be considered to be ack'ed by Bob 
Relyea as it incorporates feedback directly from him.
All changes have been tested to work for both RSA and ECC servers.

     Ticket #1556 Weak HTTPS TLS ciphers

     This patch fixes the RSA ciphers that were mistakenly turned on 
under ECC
     section, and off under RSA section. A few adjustments have also 
been made
     based on Bob Relyea's feedback. A new file, 
<instance>/conf/ciphers.info
     was also created to
      1. provide info on the ciphers
      2. provide default rsa and ecc ciphers for admins to incorporate 
into earlier
         instances (as migration script might not be ideal due to 
possible customization)

thanks,
Christina
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pki-cfu-0097-Ticket-1556-Weak-HTTPS-TLS-ciphers.patch
Type: text/x-patch
Size: 15950 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/pki-devel/attachments/20150814/a3332cfc/attachment.bin>