/[smeserver]/rpms/e-smith-base/sme8/e-smith-base-5.2.0-CipherSuite.patch
ViewVC logotype

Annotation of /rpms/e-smith-base/sme8/e-smith-base-5.2.0-CipherSuite.patch

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph


Revision 1.1 - (hide annotations) (download)
Thu Jul 19 05:50:30 2012 UTC (11 years, 11 months ago) by wellsi
Branch: MAIN
CVS Tags: e-smith-base-5_2_0-67_el5_sme, e-smith-base-5_2_0-71_el5_sme, e-smith-base-5_2_0-68_el5_sme, e-smith-base-5_2_0-77_el5_sme, e-smith-base-5_2_0-78_el5_sme, e-smith-base-5_2_0-86_el5_sme, e-smith-base-5_2_0-76_el5_sme, e-smith-base-5_2_0-84_el5_sme, e-smith-base-5_2_0-65_el5_sme, e-smith-base-5_2_0-88_el5_sme, e-smith-base-5_2_0-81_el5_sme, e-smith-base-5_2_0-82_el5_sme, e-smith-base-5_2_0-89_el5_sme, e-smith-base-5_2_0-90_el5_sme, e-smith-base-5_2_0-87_el5_sme, e-smith-base-5_2_0-80_el5_sme, e-smith-base-5_2_0-70_el5_sme, e-smith-base-5_2_0-66_el5_sme, e-smith-base-5_2_0-85_el5_sme, e-smith-base-5_2_0-69_el5_sme, e-smith-base-5_2_0-79_el5_sme, e-smith-base-5_2_0-72_el5_sme, e-smith-base-5_2_0-75_el5_sme, e-smith-base-5_2_0-73_el5_sme, e-smith-base-5_2_0-74_el5_sme, e-smith-base-5_2_0-83_el5_sme
Make CipherSuite secure by default [SME: 7026]

1 wellsi 1.1 diff -ruN e-smith-base-5.0.0.old/root/etc/e-smith/db/configuration/defaults/modSSL/CipherSuite e-smith-base-5.0.0/root/etc/e-smith/db/configuration/defaults/modSSL/CipherSuite
2     --- e-smith-base-5.0.0.old/root/etc/e-smith/db/configuration/defaults/modSSL/CipherSuite 2006-02-17 03:41:51.000000000 +0000
3     +++ e-smith-base-5.0.0/root/etc/e-smith/db/configuration/defaults/modSSL/CipherSuite 2012-07-19 05:42:22.000000000 +0100
4     @@ -1 +1 @@
5     -ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM
6     +HIGH:!SSLv2
7     diff -ruN e-smith-base-5.0.0.old/root/etc/e-smith/db/configuration/migrate/30CipherSuiteUpdate e-smith-base-5.0.0/root/etc/e-smith/db/configuration/migrate/30CipherSuiteUpdate
8     --- e-smith-base-5.0.0.old/root/etc/e-smith/db/configuration/migrate/30CipherSuiteUpdate 1970-01-01 01:00:00.000000000 +0100
9     +++ e-smith-base-5.0.0/root/etc/e-smith/db/configuration/migrate/30CipherSuiteUpdate 2012-07-19 05:58:14.000000000 +0100
10     @@ -0,0 +1,9 @@
11     +{
12     + # Migrate old CipherSuite value to new secure default
13     + # Will not change CipherSuite if it has been modified from the original default, or deleted.
14     + return unless defined $modSSL{CipherSuite};
15     + if($modSSL{CipherSuite} eq 'ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM')
16     + {
17     + $DB->set_prop('modSSL', 'CipherSuite', 'HIGH:!SSLv2');
18     + }
19     +}

admin@koozali.org
ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed