generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Don't prefer ECDHE-ECDSA ciphers when the client appears to be Safari on OS X.

Browse Source 
OS X 10.8..10.8.3 has broken support for ECDHE-ECDSA ciphers.
This commit is contained in:
Rob Stradling
2013-09-10 12:41:37 +01:00
committed by Ben Laurie
parent ff7b021040
commit cadbbd51c8
5 changed files with 114 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
doc/ssl/SSL_CTX_set_options.pod
View File

@@ -88,9 +88,10 @@ As of OpenSSL 0.9.8q and 1.0.0c, this option has no effect.
...
=item SSL_OP_MSIE_SSLV2_RSA_PADDING
=item SSL_OP_SAFARI_ECDHE_ECDSA_BUG
As of OpenSSL 0.9.7h and 0.9.8a, this option has no effect.
Don't prefer ECDHE-ECDSA ciphers when the client appears to be Safari on OS X.
OS X 10.8..10.8.3 has broken support for ECDHE-ECDSA ciphers.
=item SSL_OP_SSLEAY_080_CLIENT_DH_BUG