[389-devel] Please review (take 2): [389 Project] #47838: harden the list of ciphers available by default

[Noriko Hosoi]

https://fedorahosted.org/389/ticket/47838

Thanks to Ludwig and Rich for their comments.  I've updated the patch on 
ssl.c as well as the testcase based upon them.

https://fedorahosted.org/389/attachment/ticket/47838/0001-Ticket-47838-harden-the-list-of-ciphers-available-by.patch
git patch file (master) -- revised; As pointed out in comment:7 
<https://fedorahosted.org/389/ticket/47838#comment:7>, disable all 
ciphers if nsSSL3Cipher does not exist or empty.

https://fedorahosted.org/389/attachment/ticket/47838/0002-Ticket-47838-CI-test-add-test-case-for-ticket-47838.patch
git patch file (master) -- revised; Added more test cases.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/389-devel/attachments/20140721/533d75b2/attachment.html>