From b4da87d9123d0a82c4f73f0c2d01a2064f8fa02f Mon Sep 17 00:00:00 2001 From: Shigeki Ohtsu Date: Mon, 14 Mar 2016 15:28:27 +0900 Subject: [PATCH] deps: Disable EXPORT and LOW ciphers in openssl openssl-1.0.1s disables EXPORT and LOW ciphers by default. They are obsoleted ciphers and not safe for the current use. Node LTS also deprecates them. Fixes: https://github.com/nodejs/LTS/issues/85 PR-URL: https://github.com/nodejs/node/pull/5712 Reviewed-By: Ben Noordhuis --- deps/openssl/config/opensslconf.h | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/deps/openssl/config/opensslconf.h b/deps/openssl/config/opensslconf.h index 508b1b2da718..64875ef0fa1f 100644 --- a/deps/openssl/config/opensslconf.h +++ b/deps/openssl/config/opensslconf.h @@ -44,6 +44,9 @@ # ifndef OPENSSL_NO_STORE # define OPENSSL_NO_STORE # endif +#ifndef OPENSSL_NO_WEAK_SSL_CIPHERS +# define OPENSSL_NO_WEAK_SSL_CIPHERS +#endif #endif /* OPENSSL_DOING_MAKEDEPEND */ #ifndef OPENSSL_THREADS @@ -112,6 +115,9 @@ # if defined(OPENSSL_NO_MDC2) && !defined(NO_MDC2) # define NO_MDC2 # endif +# if defined(OPENSSL_NO_WEAK_SSL_CIPHERS) && !defined(NO_WEAK_SSL_CIPHERS) +# define NO_WEAK_SSL_CIPHERS +# endif #endif /* crypto/opensslconf.h.in */