[prev in list] [next in list] [prev in thread] [next in thread] 

List:       openbsd-cvs
Subject:    CVS: cvs.openbsd.org: src
From:       Joel Sing <jsing () openbsd ! org>
Date:       2016-10-19 16:38:40
Message-ID: 830f9ee40cf8dba0 () openbsd ! org
[Download RAW message or body]

CVSROOT:	/cvs
Module name:	src
Changes by:	jsing@cvs.openbsd.org	2016/10/19 10:38:40

Modified files:
	lib/libssl     : s3_clnt.c s3_lib.c s3_srvr.c ssl_ciph.c 
	                 ssl_lib.c ssl_locl.h t1_lib.c 

Log message:
Remove support for fixed ECDH cipher suites - these is not widely supported
and more importantly they do not provide PFS (if you want to use ECDH, use
ECDHE instead).

With input from guenther@.

ok deraadt@ guenther@

[prev in list] [next in list] [prev in thread] [next in thread]