src/com/netscape/admin/dirserv/panel/EncryptionPanel.java | 6 +++---
src/com/netscape/admin/dirserv/panel/layout.cipherPreference | 2 +-
2 files changed, 4 insertions(+), 4 deletions(-)
New commits:
commit e86e7b606a1ceb1bee18df728699111b26193148
Author: Mark Reynolds <mreynolds(a)redhat.com>
Date: Tue Oct 18 13:46:33 2016 -0400
Ticket 48743 - ds-console enables obsolete SSL ciphers by default
Description: Do not enable the Fortezza ciphers by default
https://fedorahosted.org/389/ticket/48743
Reviewed by: nhosoi(Thanks!)
diff --git a/src/com/netscape/admin/dirserv/panel/EncryptionPanel.java
b/src/com/netscape/admin/dirserv/panel/EncryptionPanel.java
index 4985cff..873dea7 100644
--- a/src/com/netscape/admin/dirserv/panel/EncryptionPanel.java
+++ b/src/com/netscape/admin/dirserv/panel/EncryptionPanel.java
@@ -751,9 +751,9 @@ class EncryptionConfigData {
"+rsa_fips_des_sha," +
"+rsa_3des_sha," +
"+rsa_fips_3des_sha," +
- "+fortezza," +
- "+fortezza_rc4_128_sha," +
- "+fortezza_null," +
+ "-fortezza," +
+ "-fortezza_rc4_128_sha," +
+ "-fortezza_null," +
"+tls_rsa_export1024_with_rc4_56_sha," +
"+tls_rsa_export1024_with_des_cbc_sha," +
"+tls_rsa_aes_128_sha," +
diff --git a/src/com/netscape/admin/dirserv/panel/layout.cipherPreference
b/src/com/netscape/admin/dirserv/panel/layout.cipherPreference
index 7083c03..dd7ec34 100644
--- a/src/com/netscape/admin/dirserv/panel/layout.cipherPreference
+++ b/src/com/netscape/admin/dirserv/panel/layout.cipherPreference
@@ -103,7 +103,7 @@
ctrl=togglepane;
text=$.cipherPreference.ss3.6
id="fortezza";
- val=true;
+ val=false;
},
{
ctrl=rigid;