[Icecast-dev] fix for unsafe ssl options

Niv Sardi xaiki at evilgiggle.com
Wed Aug 4 08:37:44 PDT 2010


Do we really need that many ?
http://www.google.com/codesearch/p?hl=en#5KTrgOW2hXs/pub/nslu2/sources/vsftpd-2.0.4.tar.gz%7CXknrlk4c3C4/vsftpd-2.0.4/ssl.c&q=SSL_CTX_set_cipher_list

vsftpd seems to only be including "DES-CBC3-SHA"
http://www.google.com/codesearch?q=tunable_ssl_ciphers&exact_package=http://ftp.osuosl.org/pub/nslu2/sources/vsftpd-2.0.4.tar.gz&hl=en

That appart (and I'm no OpenSSL savvy), the patch looks good.

Cheers,

-- 
Niv Sardi



More information about the Icecast-dev mailing list