Commit b3a09056 authored by deuce's avatar deuce
Browse files

Disable TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 again, there's more issues

here, and it's not really needed.
parent 7e13901c
--- session/ssl_suites.c.orig 2020-02-17 15:37:41.582802000 -0500
+++ session/ssl_suites.c 2020-02-17 15:40:10.099185000 -0500
--- session/ssl_suites.c.orig 2020-02-17 15:42:41.411268000 -0500
+++ session/ssl_suites.c 2020-02-17 16:05:59.563026000 -0500
@@ -135,7 +135,7 @@
{ TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,
DESCRIPTION( "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" )
......@@ -9,15 +9,21 @@
CIPHERSUITE_FLAG_ECC | CIPHERSUITE_FLAG_TLS12 },
/* { TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,
DESCRIPTION( "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" )
@@ -190,7 +190,7 @@
{ TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
@@ -187,11 +187,11 @@
CRYPT_ALGO_ECDH, CRYPT_ALGO_RSA, CRYPT_ALGO_AES,
CRYPT_ALGO_HMAC_SHA2, 0, 16, GCMICV_SIZE,
CIPHERSUITE_FLAG_ECC | CIPHERSUITE_FLAG_GCM | CIPHERSUITE_FLAG_TLS12 },
- { TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
+/* { TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
DESCRIPTION( "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" )
CRYPT_ALGO_ECDH, CRYPT_ALGO_RSA, CRYPT_ALGO_AES,
- CRYPT_ALGO_HMAC_SHA2, 48, 16, GCMICV_SIZE,
- CIPHERSUITE_FLAG_ECC | CIPHERSUITE_FLAG_GCM | CIPHERSUITE_FLAG_TLS12 },
+ CRYPT_ALGO_HMAC_SHA2, 48, 32, GCMICV_SIZE,
CIPHERSUITE_FLAG_ECC | CIPHERSUITE_FLAG_GCM | CIPHERSUITE_FLAG_TLS12 },
+ CIPHERSUITE_FLAG_ECC | CIPHERSUITE_FLAG_GCM | CIPHERSUITE_FLAG_TLS12 },*/
/* AES-GCM with DH */
{ TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,
@@ -200,9 +200,9 @@
CRYPT_ALGO_HMAC_SHA2, 0, 16, GCMICV_SIZE,
CIPHERSUITE_FLAG_DH | CIPHERSUITE_FLAG_GCM | CIPHERSUITE_FLAG_TLS12 },
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment