]> www.infradead.org Git - users/dwmw2/openconnect.git/commit
openssl: allow ALL ciphers when allow-insecure-crypto is enabled
authorMike Gilbert <floppym@gentoo.org>
Sun, 10 Apr 2022 16:21:57 +0000 (12:21 -0400)
committerMike Gilbert <floppym@gentoo.org>
Sun, 10 Apr 2022 16:21:57 +0000 (12:21 -0400)
commite2b38313bbd5050acaac49a75f0a024d05b505e5
treea48d6cfd5fd1beaa19377be060e17ebd3c9151df
parentf223d271570f7483a16869973771821ebe2a7c49
openssl: allow ALL ciphers when allow-insecure-crypto is enabled

Previously, the cipher list was set to "DEFAULT:+3DES:+RC4". However,
according to ciphers(1), the DEFAULT keyword cannot be combined with
other strings using the + characters. In other words, ":+3DES:+RC4" gets
ignored.

The user is opting into insecure behavior, so let's keep it simple and
just allow everything.

This change fixes the obsolete-server-crypto test when openconnect is
built against openssl-1.1.x.

Signed-off-by: Mike Gilbert <floppym@gentoo.org>
openssl.c