Issues #27850 and #27766: Remove 3DES from ssl default cipher list and add ChaCha20 Poly1305.

This commit is contained in:
Christian Heimes
2016-09-06 20:06:47 +02:00
parent 499378f087
commit d988f429fe
3 changed files with 33 additions and 15 deletions

View File

@@ -36,6 +36,12 @@ Core and Builtins
Library
-------
- Issue #27850: Remove 3DES from ssl module's default cipher list to counter
measure sweet32 attack (CVE-2016-2183).
- Issue #27766: Add ChaCha20 Poly1305 to ssl module's default ciper list.
(Required OpenSSL 1.1.0 or LibreSSL).
- Issue #26470: Port ssl and hashlib module to OpenSSL 1.1.0.
- Issue #27944: Fix some memory-corruption bugs in the log reading code of the