lp://staging/~ubuntu-branches/ubuntu/precise/openssl/precise-201312110155
- Get this branch:
- bzr branch lp://staging/~ubuntu-branches/ubuntu/precise/openssl/precise-201312110155
Branch merges
- Ubuntu branches: Pending requested
-
Diff: 71 lines (+31/-11) (has conflicts)3 files modifieddebian/changelog (+29/-9)
debian/patches/tls12_workarounds.patch (+1/-1)
ssl/s23_clnt.c (+1/-1)
Branch information
- Owner:
- Ubuntu branches
- Status:
- Development
Recent revisions
- 78. By Colin Watson
-
Check TLS1_get_
client_ version rather than TLS1_get_version for client
hello cipher list truncation, in a further attempt to get things working
again for everyone (LP: #986147). - 76. By Colin Watson
-
* Backport more upstream patches to work around TLS 1.2 failures
(LP #965371):
- Do not use record version number > TLS 1.0 in initial client hello:
some (but not all) hanging servers will now work.
- Truncate the number of ciphers sent in the client hello to 50. Most
broken servers should now work.
- Don't allow TLS 1.2 SHA-256 ciphersuites in TLS 1.0, 1.1 connections.
* Don't re-enable TLS 1.2 client support by default yet, since more of the
sites listed in the above bug and its duplicates still fail if I do that
versus leaving it disabled. - 71. By Colin Watson
-
Pass cross-compiling options to 'make install' as well, since apparently
it likes to rebuild fips_premain_dso.
Branch metadata
- Branch format:
- Branch format 7
- Repository format:
- Bazaar repository format 2a (needs bzr 1.16 or later)
- Stacked on:
- lp://staging/ubuntu/trusty/openssl