BBlack has uploaded a new change for review.
https://gerrit.wikimedia.org/r/308433
Change subject: ssl_ciphersuite: remove DHE+chapoly
......................................................................
ssl_ciphersuite: remove DHE+chapoly
Nothing has negotiated this to date, and it seems unlikely any
client will ever implement this as their only ChaPoly option,
seeing as DHE is on its way out the door everywhere and viewed as
a distateful fallback option.
Change-Id: I9c4b2844bd8a26a2b9ef1ef38df72e8758565112
---
M modules/wmflib/lib/puppet/parser/functions/ssl_ciphersuite.rb
1 file changed, 0 insertions(+), 1 deletion(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/33/308433/1
diff --git a/modules/wmflib/lib/puppet/parser/functions/ssl_ciphersuite.rb
b/modules/wmflib/lib/puppet/parser/functions/ssl_ciphersuite.rb
index fd5d22f..66fe4f6 100644
--- a/modules/wmflib/lib/puppet/parser/functions/ssl_ciphersuite.rb
+++ b/modules/wmflib/lib/puppet/parser/functions/ssl_ciphersuite.rb
@@ -95,7 +95,6 @@
'ECDHE-RSA-CHACHA20-POLY1305-D', # 1.0.2+cloudflare
'ECDHE-RSA-AES128-GCM-SHA256',
'ECDHE-RSA-AES256-GCM-SHA384',
- 'DHE-RSA-CHACHA20-POLY1305', # openssl-1.1.0, 1.0.2+cloudflare
'DHE-RSA-AES128-GCM-SHA256',
'DHE-RSA-AES256-GCM-SHA384',
],
--
To view, visit https://gerrit.wikimedia.org/r/308433
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I9c4b2844bd8a26a2b9ef1ef38df72e8758565112
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: BBlack <bbl...@wikimedia.org>
_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
