diff options
| author | Nick Mathewson <nickm@torproject.org> | 2014-04-08 11:31:48 -0400 |
|---|---|---|
| committer | Nick Mathewson <nickm@torproject.org> | 2014-04-08 11:42:07 -0400 |
| commit | 4231729176c63d28f7adb61074f79464e2ee73a7 (patch) | |
| tree | 45a72fb18fa8d1178caf0faaaaae0936a7cf64e1 /changes | |
| parent | d00dc9f7d1b98dd80bbc890db1ddf497aae3bb9e (diff) | |
| download | tor-4231729176c63d28f7adb61074f79464e2ee73a7.tar tor-4231729176c63d28f7adb61074f79464e2ee73a7.tar.gz | |
Update ciphers.inc to match ff28
The major changes are to re-order some ciphers, to drop the ECDH suites
(note: *not* ECDHE: ECDHE is still there), to kill off some made-up
stuff (like the SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA suite), to drop
some of the DSS suites... *and* to enable the ECDHE+GCM ciphersuites.
This change is autogenerated by get_mozilla_ciphers.py from
Firefox 28 and OpenSSL 1.0.1g.
Resolves ticket 11438.
Diffstat (limited to 'changes')
| -rw-r--r-- | changes/ff28_ciphers | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/changes/ff28_ciphers b/changes/ff28_ciphers new file mode 100644 index 000000000..05eb4e9bc --- /dev/null +++ b/changes/ff28_ciphers @@ -0,0 +1,6 @@ + o Minor features (performance, compatibility): + - Update the list of TLS cipehrsuites that a client advertises + to match those advertised by Firefox 28. This enables selection of + (fast) GCM ciphersuites, disables some strange old ciphers, and + disables the ECDH (not to be confused with ECDHE) ciphersuites. + Resolves ticket 11438. |