diff options
| author | Jan Venekamp <1422460+jan2000@users.noreply.github.com> | 2022-02-19 15:44:17 +0100 |
|---|---|---|
| committer | Jay Satiro <raysatiro@yahoo.com> | 2022-02-20 16:13:31 -0500 |
| commit | 14d9358a0c0e232e95bf8f2bf7dcbcd7369e8dcb (patch) | |
| tree | c5d72b02378f2c46bc048317cc73b9e9a8413bd0 | |
| parent | f36e32b5b80129c1177d8d8e01341b02505f8fc4 (diff) | |
| download | curl-14d9358a0c0e232e95bf8f2bf7dcbcd7369e8dcb.tar.gz | |
sectransp: mark a 3DES cipher as weak
- Change TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA strength to weak.
All other 3DES ciphers are already marked as weak.
Closes https://github.com/curl/curl/pull/8479
| -rw-r--r-- | lib/vtls/sectransp.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/vtls/sectransp.c b/lib/vtls/sectransp.c index 059756eb6..be41d4f4b 100644 --- a/lib/vtls/sectransp.c +++ b/lib/vtls/sectransp.c @@ -603,7 +603,7 @@ const static struct st_cipher ciphertable[] = { CIPHER_WEAK_RC_ENCRYPTION), CIPHER_DEF(TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA, /* 0xC003 */ "ECDH-ECDSA-DES-CBC3-SHA", - CIPHER_STRONG_ENOUGH), + CIPHER_WEAK_3DES_ENCRYPTION), CIPHER_DEF(TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, /* 0xC004 */ "ECDH-ECDSA-AES128-SHA", CIPHER_STRONG_ENOUGH), |