URL:
https://github.com/freeipa/freeipa/pull/3373
Author: flo-renaud
Title: #3373: Update the ciphers list
Action: opened
PR body:
"""
The previous list of ciphers was allowing weak algorithms.
The fix removes:
- kECDH: cipher suites using fixed ECDH key agreement signed by CAs with RSA
and ECDSA keys or either respectively.
- kDH: cipher suites using DH key agreement and DH certificates signed by
CAs with RSA and DSS keys or either respectively.
Fixes:
https://pagure.io/freeipa/issue/8000
"""
To pull the PR as Git branch:
git remote add ghfreeipa
https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3373/head:pr3373
git checkout pr3373