changeset 1e160dfa3c32 in /home/hg/repos/gajim
author: Fedor Brunner fedor.brunner@azet.sk branches: gajim_0.16 details:http://hg.gajim.org/gajim?cmd=changeset;node=1e160dfa3c32 description: Disable TLS tickets (RFC 5077) in OpenSSL Context for XTLS.
More on the effect of TLS tickets: https://media.blackhat.com/us-13/US-13-Daigniere-TLS-Secrets-Slides.pdf
Fixes #7638
diffstat:
src/common/jingle_xtls.py | 3 ++- 1 files changed, 2 insertions(+), 1 deletions(-)
diffs (13 lines):
diff -r 8d9c23ae110c -r 1e160dfa3c32 src/common/jingle_xtls.py --- a/src/common/jingle_xtls.py Mon Jan 27 20:18:42 2014 +0100 +++ b/src/common/jingle_xtls.py Wed Jan 29 14:12:10 2014 +0100 @@ -99,7 +99,8 @@ constructs and returns the context objects """ ctx = SSL.Context(SSL.SSLv23_METHOD) - flags = (SSL.OP_NO_SSLv2 | SSL.OP_NO_SSLv3 | SSL.OP_SINGLE_DH_USE) + flags = (SSL.OP_NO_SSLv2 | SSL.OP_NO_SSLv3 | SSL.OP_SINGLE_DH_USE \ + | SSL.OP_NO_TICKET) ctx.set_options(flags) ctx.set_cipher_list('HIGH:!aNULL:!3DES')
-
Gajim