Skip to content

Commit f22e7c3

Browse files
authored
Merge pull request #27 from martinsumner/develop-2.9
Remove bad cipher filter
2 parents d606cb0 + ea64c62 commit f22e7c3

File tree

1 file changed

+7
-8
lines changed

1 file changed

+7
-8
lines changed

src/mochiweb_socket.erl

+7-8
Original file line numberDiff line numberDiff line change
@@ -35,14 +35,13 @@ add_unbroken_ciphers_default(Opts) ->
3535
[{ciphers, Ciphers} | proplists:delete(ciphers, Opts)].
3636

3737
filter_broken_cipher_suites(Ciphers) ->
38-
case proplists:get_value(ssl_app, ssl:versions()) of
39-
"5.3" ++ _ ->
40-
lists:filter(fun(Suite) ->
41-
string:left(atom_to_list(element(1, Suite)), 4) =/= "ecdh"
42-
end, Ciphers);
43-
_ ->
44-
Ciphers
45-
end.
38+
% This was intended to remove any cipher that has "ecdh", however it makes
39+
% assumptions that the ciphers are passed in their non-binary format e.g.
40+
% without conversion using
41+
% https://github.com/erlang/otp/blob/OTP_R16B03/lib/ssl/src/ssl_cipher.erl#L750-L857
42+
% So we ignore the filter for now. The filter should be re-applied in riak_core
43+
% prior to any conversion.
44+
Ciphers.
4645

4746
filter_unsecure_cipher_suites(Ciphers) ->
4847
lists:filter(fun

0 commit comments

Comments
 (0)