search

cloudflare / sslconfig

Cloudflare's Internet facing SSL configuration
BSD 3-Clause "New" or "Revised" License
1.3k stars 132 forks source link

RC4 patch for OpenSSL 1.0.2? #9

Closed v998 closed 9 years ago

v998 commented 9 years ago

The current patches/openssl__disable_rc4.patch only allows patching with 1.0.1.

Since you have released a Chacha20-Poly1305 patch for 1.0.2, should you also include a RC4 patch for 1.0.2?

v998 commented 9 years ago

RC4 should not be used for HTTPS connection anymore. So disabling it completely at the protocol level from webserver config would be better.

PiotrSikora commented 9 years ago

RC4 has been disabled since d6529d3c.