File openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch of Package openssl
commit 9d9e0535366b4e5cfb2eb4d74be6b3d546b98fe8
Author: Vitezslav Cizek <vcizek@suse.com>
Date: Mon Oct 10 16:41:57 2016 +0200
Degrade 3DES to MEDIUM in SSL2
The SWEET32 fix moved 3DES from HIGH to MEDIUM, but omitted SSL2.
CLA: trivial
Reviewed-by: Kurt Roeckx <kurt@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/1683)
(cherry picked from commit 6d69dc56de8f0535be9ccabea7a8d4e61c04c2f1)
diff --git a/ssl/s2_lib.c b/ssl/s2_lib.c
index 7bcb81a..0322dc8 100644
--- a/ssl/s2_lib.c
+++ b/ssl/s2_lib.c
@@ -254,7 +254,7 @@ OPENSSL_GLOBAL const SSL_CIPHER ssl2_ciphers[] = {
SSL_3DES,
SSL_MD5,
SSL_SSLV2,
- SSL_NOT_DEFAULT | SSL_NOT_EXP | SSL_HIGH,
+ SSL_NOT_DEFAULT | SSL_NOT_EXP | SSL_MEDIUM,
0,
112,
168,