<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<a class="moz-txt-link-freetext" href="https://fedorahosted.org/389/ticket/47838">https://fedorahosted.org/389/ticket/47838</a><br>
<br>
Thanks to Ludwig and Rich for their comments. I've updated the
patch on ssl.c as well as the testcase based upon them.<br>
<br>
<a class="moz-txt-link-freetext" href="https://fedorahosted.org/389/attachment/ticket/47838/0001-Ticket-47838-harden-the-list-of-ciphers-available-by.patch">https://fedorahosted.org/389/attachment/ticket/47838/0001-Ticket-47838-harden-the-list-of-ciphers-available-by.patch</a><br>
git patch file (master) -- revised; As pointed out in <a
href="https://fedorahosted.org/389/ticket/47838#comment:7"
title="Comment 7 for Ticket #47838">comment:7</a>, disable all
ciphers if nsSSL3Cipher does not exist or empty. <br>
<br>
<a class="moz-txt-link-freetext" href="https://fedorahosted.org/389/attachment/ticket/47838/0002-Ticket-47838-CI-test-add-test-case-for-ticket-47838.patch">https://fedorahosted.org/389/attachment/ticket/47838/0002-Ticket-47838-CI-test-add-test-case-for-ticket-47838.patch</a><br>
git patch file (master) -- revised; Added more test cases. <br>
</body>
</html>