LGTM, thanks On Mon, 2 Nov 2015 at 14:10 'Klaus Aehlig' via ganeti-devel < [email protected]> wrote:
> As various ssl implementations have different ideas about > which dh key lengths are acceptable, refrain from standard > dh altogether (and not only from anonymous dh) to avoid > handshake problems. > > Signed-off-by: Klaus Aehlig <[email protected]> > --- > src/Ganeti/Constants.hs | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > > diff --git a/src/Ganeti/Constants.hs b/src/Ganeti/Constants.hs > index 86c8c95..7291957 100644 > --- a/src/Ganeti/Constants.hs > +++ b/src/Ganeti/Constants.hs > @@ -609,7 +609,7 @@ rsaKeyBits = 2048 > -- after it's been removed. Use the "openssl" utility to check the > -- allowed ciphers, e.g. "openssl ciphers -v HIGH:-DES". > opensslCiphers :: String > -opensslCiphers = "HIGH:-DES:-3DES:-EXPORT:-ADH" > +opensslCiphers = "HIGH:-DES:-3DES:-EXPORT:-DH" > > -- * X509 > > -- > 2.6.0.rc2.230.g3dd15c0 > > -- Helga Velroyen Software Engineer [email protected] Google Germany GmbH Dienerstraße 12 80331 München Geschäftsführer: Matthew Scott Sucherman, Paul Terence Manicle Registergericht und -nummer: Hamburg, HRB 86891 Sitz der Gesellschaft: Hamburg Diese E-Mail ist vertraulich. Wenn Sie nicht der richtige Adressat sind, leiten Sie diese bitte nicht weiter, informieren Sie den Absender und löschen Sie die E-Mail und alle Anhänge. Vielen Dank. This e-mail is confidential. If you are not the right addressee please do not forward it, please inform the sender, and please erase this e-mail including any attachments. Thanks.
