Refine Logjam cipher blacklisting
- The OS check was wrong - EDH ciphers are (hopefully) not affected and break e.g. gnupg.org
This commit is contained in:
parent
4e333d61cd
commit
c76746ca32
@ -49,7 +49,7 @@ def _is_secure_cipher(cipher):
|
||||
# https://codereview.qt-project.org/#/c/75943/
|
||||
return False
|
||||
# OpenSSL should already protect against this in a better way
|
||||
elif cipher.keyExchangeMethod() in ['DH', 'EDH'] and os.name != 'nt':
|
||||
elif cipher.keyExchangeMethod() == 'DH' and os.name == 'nt':
|
||||
# https://weakdh.org/
|
||||
return False
|
||||
elif cipher.encryptionMethod().upper().startswith('RC4'):
|
||||
|
Loading…
Reference in New Issue
Block a user