Re: Re-enabling old ciphers in openssl

2020-12-28 Thread John Kennedy
On Sun, Dec 27, 2020 at 03:49:10PM -0800, Dan Mahoney (Gushi) wrote: > Hey there all. > > This is a "don't try this at home" question. This is not something I'm > asking how to do in the general case, but I'd like to know. > > It seems recently (since 1.1.1, OpenSSL has deprecated a number of

Re: Re-enabling old ciphers in openssl

2020-12-27 Thread Mel Pilgrim
On 2020-12-27 15:49, Dan Mahoney (Gushi) wrote: Ergo, I am wondering what the best way forward is to get a reasonably patched version of openssl that has old ciphers turned on (since it is still possible at compile-time, the code hasn't been outright removed), that I can build *some* subset of po

Re: Re-enabling old ciphers in openssl

2020-12-27 Thread Russell L. Carter
On 12/27/20 4:49 PM, Dan Mahoney (Gushi) wrote: Hey there all. [...] Here are the questions I can't seem to answer: 1) There's no make.conf entry to override the openssl ciphers.  This needs to be done at the port level.  (Probably reasonable, I don't think there should be an insecure "fla

Re-enabling old ciphers in openssl

2020-12-27 Thread Dan Mahoney (Gushi)
Hey there all. This is a "don't try this at home" question. This is not something I'm asking how to do in the general case, but I'd like to know. It seems recently (since 1.1.1, OpenSSL has deprecated a number of ciphers, and made them a compile-time default disable.) WHat this means is th