[Icecast-dev] fix for unsafe ssl options

[Thomas B. Ruecker]

Hi Niv,

Thanks for your comments. I'm CC'ing the patch author.

On Wed, Aug 04, 2010 at 05:37:44PM +0200, Niv Sardi wrote:
> Do we really need that many ?
> http://www.google.com/codesearch/p?hl=en#5KTrgOW2hXs/pub/nslu2/sources/vsftpd-2.0.4.tar.gz%7CXknrlk4c3C4/vsftpd-2.0.4/ssl.c&q=SSL_CTX_set_cipher_list
> 
> vsftpd seems to only be including "DES-CBC3-SHA"
> http://www.google.com/codesearch?q=tunable_ssl_ciphers&exact_package=http://ftp.osuosl.org/pub/nslu2/sources/vsftpd-2.0.4.tar.gz&hl=en
> 
> That appart (and I'm no OpenSSL savvy), the patch looks good.

I have to admit that I haven't even looked at the patch while forwarding the information, but I'm willing to trust justdave here as he most likely looked at what Mozilla products do and why they do it. ;-)

Cheers

Thomas


PS: List requires subscription to post.