aboutsummaryrefslogtreecommitdiff
path: root/changes
diff options
context:
space:
mode:
authorNick Mathewson <nickm@torproject.org>2014-05-07 23:04:48 -0400
committerNick Mathewson <nickm@torproject.org>2014-05-07 23:04:48 -0400
commit882893c8c3657be66b48580aa972e71dac25da5e (patch)
tree5875d47db60d130be718ee30d148f0eb9f860a09 /changes
parent894c8b22662131817e5d7383740b2b285f9b7491 (diff)
parentbd3db82906a2efcd678b5f4b61fef26c93828777 (diff)
downloadtor-882893c8c3657be66b48580aa972e71dac25da5e.tar
tor-882893c8c3657be66b48580aa972e71dac25da5e.tar.gz
Merge remote-tracking branch 'public/bug11513_024' into maint-0.2.4
Diffstat (limited to 'changes')
-rw-r--r--changes/bug1151312
1 files changed, 12 insertions, 0 deletions
diff --git a/changes/bug11513 b/changes/bug11513
new file mode 100644
index 000000000..820c02605
--- /dev/null
+++ b/changes/bug11513
@@ -0,0 +1,12 @@
+ o Major bugfixes:
+ - Generate the server's preference list for ciphersuites
+ automatically based on uniform criteria, and considering all
+ OpenSSL ciphersuites with acceptable strength and forward
+ secrecy. (The sort order is: prefer AES to 3DES; break ties by
+ preferring ECDHE to DHE; break ties by preferring GCM to CBC;
+ break ties by preferring SHA384 to SHA256 to SHA1; and finally,
+ break ties by preferring AES256 to AES128.) This resolves bugs
+ #11513, #11492, #11498, #11499. Bugs reported by 'cypherpunks'.
+ Bugfix on 0.2.4.8-alpha.
+
+