aboutsummaryrefslogtreecommitdiff
path: root/changes
diff options
context:
space:
mode:
authorNick Mathewson <nickm@torproject.org>2014-04-15 14:54:25 -0400
committerNick Mathewson <nickm@torproject.org>2014-04-15 14:54:25 -0400
commit2704441e7ff1242d168bc14dda946fc41844f2c5 (patch)
tree67a81094c0bdb40c6d1b6e59f71b32d35a842cd6 /changes
parent9556668f5fe33faec2a2de049d10061150ac6608 (diff)
parentbd3db82906a2efcd678b5f4b61fef26c93828777 (diff)
downloadtor-2704441e7ff1242d168bc14dda946fc41844f2c5.tar.gz
tor-2704441e7ff1242d168bc14dda946fc41844f2c5.zip
Merge remote-tracking branch 'public/bug11513_024'
Diffstat (limited to 'changes')
-rw-r--r--changes/bug1151312
1 files changed, 12 insertions, 0 deletions
diff --git a/changes/bug11513 b/changes/bug11513
new file mode 100644
index 0000000000..820c02605f
--- /dev/null
+++ b/changes/bug11513
@@ -0,0 +1,12 @@
+ o Major bugfixes:
+ - Generate the server's preference list for ciphersuites
+ automatically based on uniform criteria, and considering all
+ OpenSSL ciphersuites with acceptable strength and forward
+ secrecy. (The sort order is: prefer AES to 3DES; break ties by
+ preferring ECDHE to DHE; break ties by preferring GCM to CBC;
+ break ties by preferring SHA384 to SHA256 to SHA1; and finally,
+ break ties by preferring AES256 to AES128.) This resolves bugs
+ #11513, #11492, #11498, #11499. Bugs reported by 'cypherpunks'.
+ Bugfix on 0.2.4.8-alpha.
+
+