rnhmjoj/qutebrowser
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Disable all Diffie-Hellman ciphers on Windows

Browse Source
This commit is contained in:
Florian Bruhin 2016-05-01 17:42:20 +02:00
parent 0124354b91
commit 6bd2591681
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
qutebrowser/browser/network/networkmanager.py
View File

@ -48,9 +48,9 @@ def _is_secure_cipher(cipher):
# https://codereview.qt-project.org/#/c/75943/
return False
# OpenSSL should already protect against this in a better way
# elif cipher.keyExchangeMethod() in ['DH', 'EDH']:
# # https://weakdh.org/
# return False
elif cipher.keyExchangeMethod() in ['DH', 'EDH'] and os.name != 'nt':
# https://weakdh.org/
return False
elif cipher.encryptionMethod().upper().startswith('RC4'):
# http://en.wikipedia.org/wiki/RC4#Security
# https://codereview.qt-project.org/#/c/148906/