Refine Logjam cipher blacklisting

- The OS check was wrong
- EDH ciphers are (hopefully) not affected and break e.g. gnupg.org
This commit is contained in:
Florian Bruhin 2016-05-01 22:19:11 +02:00
parent 4e333d61cd
commit c76746ca32

View File

@ -49,7 +49,7 @@ def _is_secure_cipher(cipher):
# https://codereview.qt-project.org/#/c/75943/
return False
# OpenSSL should already protect against this in a better way
elif cipher.keyExchangeMethod() in ['DH', 'EDH'] and os.name != 'nt':
elif cipher.keyExchangeMethod() == 'DH' and os.name == 'nt':
# https://weakdh.org/
return False
elif cipher.encryptionMethod().upper().startswith('RC4'):