Full_Name: Tim Strobell
Version: HEAD
OS: RHEL6
URL: ftp://ftp.openldap.org/incoming/tim-strobell-2012060501.patch
Submission from: (NULL) (2001:480:20:112:210:18ff:fe19:b000)
Under certain circumstances, cipher suite selection by name ("OpenSSL name") may
inadvertently cause any additional named cipher selections to be ignored.
In tls_m.c:625...
for (i=0; i<ciphernum; i++) {
if (!strcmp(ciphers_def[i].ossl_name, cipher) &&
cipher_list[1] != -1)
cipher_list[i] = action;
}
The index into cipher_list on line 627 is 1 (one) but should be i (eye).
Any cipher selection that disables RC2-CBC-MD5 (cipher_list[1]) will not
add/subtract/disable (action = 1, 0, -1 resp.) any further named ciphers in the
list.
