projects / project / ustream-ssl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 34b0b80) | patch
ustream-ssl: Revised security on mbedtls
authorEneas U de Queiroz via openwrt-devel <[email protected]>
Sat, 16 Jun 2018 04:04:52 +0000 (04:04 +0000)
committerJohn Crispin <[email protected]>
Fri, 27 Jul 2018 09:16:01 +0000 (11:16 +0200)
commit450ada04ce09da14e56a0d8ac170db868d3e26fb
tree582226ca8b16153944763a2e712077a26a9129datree | snapshot
parent34b0b80ad302d873f00be5f9c8051b73b2e86a01commit | diff
ustream-ssl: Revised security on mbedtls

The sender domain has a DMARC Reject/Quarantine policy which disallows
sending mailing list messages using the original "From" header.

To mitigate this problem, the original message has been wrapped
automatically by the mailing list software.
I've revised the security options, and made them more uniform across the
ssl libraries.

- use only TLS 1.2 in server mode
- changed the ciphersuite ordering

Signed-off-by: Eneas U de Queiroz <[email protected]>
ustream-mbedtls.c diff | blob | history
ustream SSL wrapper