[Bug 2484] [IcedTea6] Disable export ciphers by default

[bugzilla-daemon at icedtea.classpath.org]

http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2484

Andrew John Hughes <gnu.andrew at redhat.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED
   Target Milestone|---                         |6-1.13.8

--- Comment #1 from Andrew John Hughes <gnu.andrew at redhat.com> ---
6u95 release notes:

"The EXPORT suites have been removed from the default enabled ciphersuite list.

The EXPORT strength ciphersuites (such as SSL_RSA_EXPORT_WITH_DES40_CBC_SHA,
SSL_RSA_EXPORT_WITH_RC4_40_MD5) were recently shown as too weak to be
practically used in secure communications. They are no longer enabled by
default.

See 8074458 (not public)."

http://www.oracle.com/technetwork/java/javase/documentation/overview-156328.html

-- 
You are receiving this mail because:
You are on the CC list for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.openjdk.java.net/pipermail/distro-pkg-dev/attachments/20150629/2658ab6f/attachment.html>