From 443bffbe31971a66ce7b83c3f447057957b121cb Mon Sep 17 00:00:00 2001 From: Matthew Harmsen Date: Wed, 14 Aug 2013 16:10:13 -0700 Subject: By default, disable SSL3_RSA_WITH_DES_CBC_SHA. * TRAC Ticket #706 - Disable SSL3_RSA_WITH_DES_CBC_SHA --- base/server/python/pki/server/deployment/pkiparser.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'base/server/python') diff --git a/base/server/python/pki/server/deployment/pkiparser.py b/base/server/python/pki/server/deployment/pkiparser.py index af8330c07..e7b23a6d3 100644 --- a/base/server/python/pki/server/deployment/pkiparser.py +++ b/base/server/python/pki/server/deployment/pkiparser.py @@ -794,7 +794,7 @@ class PKIConfigParser: "+SSL3_RSA_WITH_RC4_128_SHA," + \ "-SSL3_RSA_EXPORT_WITH_RC4_40_MD5," + \ "+SSL3_RSA_WITH_3DES_EDE_CBC_SHA," + \ - "+SSL3_RSA_WITH_DES_CBC_SHA," + \ + "-SSL3_RSA_WITH_DES_CBC_SHA," + \ "-SSL3_RSA_EXPORT_WITH_RC2_CBC_40_MD5," + \ "-SSL3_FORTEZZA_DMS_WITH_FORTEZZA_CBC_SHA," + \ "-SSL_RSA_FIPS_WITH_DES_CBC_SHA," + \ -- cgit