Uh oh!
There was an error while loading. Please reload this page.
deps: update openssl config - #5630
Conversation
OPENSSL_NO_SSL2 and OPENSSL_NO_WEAK_SSL_CIPHERS are defined in opensslconf.h
shigeki
commented
Mar 9, 2016
Fishrock123
commented
Mar 9, 2016
s/udpate/update/ :) |
a12afa6 to
d76834dCompareshigeki
commented
Mar 9, 2016
@Fishrock123 Oops. Fixed typo. Thanks. |
d76834d to
ca8adf0Compareshigeki
commented
Mar 10, 2016
CI in https://ci.nodejs.org/job/node-test-commit/2505/ is all green. |
shigeki
commented
Mar 10, 2016
Strictly speaking, this fix corresponds to semver-major. As discussed in LTS on nodejs/Release#85, I would like to apply this to 5.x. |
jasnell
commented
Mar 11, 2016
LGTM for master... Let's add it to the lts-agenda for Monday to discuss. |
shigeki
commented
Mar 15, 2016
@indutny Could you review this PR? |
indutny
commented
Mar 15, 2016
LGTM, if CI is green |
shigeki
commented
Mar 15, 2016
@indutny Thanks. CI was submitted in https://ci.nodejs.org/job/node-test-pull-request/1927/. |
OPENSSL_NO_SSL2 and OPENSSL_NO_WEAK_SSL_CIPHERS are defined in opensslconf.h Fixes: nodejs/Release#85 PR-URL: #5630 Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Fedor Indutny <fedor@indutny.com>
shigeki
commented
Mar 15, 2016
CI is all green. Landed in 668fb17. Thanks. |
jasnell
commented
Mar 15, 2016
shigeki
commented
Mar 15, 2016
jasnell
commented
Mar 15, 2016
Sounds good! :-) |
OPENSSL_NO_SSL2 and OPENSSL_NO_WEAK_SSL_CIPHERS are defined in opensslconf.h Fixes: nodejs/Release#85 PR-URL: #5630 Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Fedor Indutny <fedor@indutny.com>
OPENSSL_NO_SSL2 and OPENSSL_NO_WEAK_SSL_CIPHERS are defined in opensslconf.h Fixes: nodejs/Release#85 PR-URL: #5630 Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Fedor Indutny <fedor@indutny.com>
MylesBorins
commented
Mar 17, 2016
@shigeki is this pressing enough to roll into the next v4 release asap or should it have a bit of time to live on v5 first? |
shigeki
commented
Mar 18, 2016
@thealphanerd This fix is a kind of regular procedures in upgrading openssl and has just a small risk. So it's already enough to roll to v4.x. |
OPENSSL_NO_SSL2 and OPENSSL_NO_WEAK_SSL_CIPHERS are defined in opensslconf.h Fixes: nodejs/Release#85 PR-URL: #5630 Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Fedor Indutny <fedor@indutny.com>
OPENSSL_NO_SSL2 and OPENSSL_NO_WEAK_SSL_CIPHERS are defined in opensslconf.h Fixes: nodejs/Release#85 PR-URL: #5630 Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Fedor Indutny <fedor@indutny.com>
Pull Request check-list
make -j8 test(UNIX) orvcbuild test nosign(Windows) pass withthis change (including linting)?
test (or a benchmark) included?
existing APIs, or introduces new ones)?
Affected core subsystem(s)
deps: openssl
Description of change
deps/openssl/configwere not updated in the last upgrading. Two new defines of OPENSSL_NO_SSL2 and OPENSSL_NO_WEAK_SSL_CIPHERS are defined in opensslconf.h.This disables several ciphers included in EXPORT and LOW. They are also disabled in the default cipher list but I think that applying this to LTS should be discussed in LTS issue. I will open it.
CI is running on https://ci.nodejs.org/job/node-test-commit/2502/ but something Jenkins error was on MacOS. I will try it again.
R: @bnoordhuis