Blame SOURCES/openssl-1.0.2j-downgrade-strength.patch

aa8173
diff -up openssl-1.0.2j/ssl/s3_lib.c.downgrade-strength openssl-1.0.2j/ssl/s3_lib.c
aa8173
--- openssl-1.0.2j/ssl/s3_lib.c.downgrade-strength	2017-01-05 17:23:21.091203023 +0100
aa8173
+++ openssl-1.0.2j/ssl/s3_lib.c	2017-01-05 17:36:37.250194225 +0100
aa8173
@@ -227,7 +227,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]
aa8173
      SSL_SSLV3,
aa8173
      SSL_NOT_EXP | SSL_MEDIUM,
aa8173
      SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
aa8173
-     128,
aa8173
+     112,
aa8173
      128,
aa8173
      },
aa8173
 
aa8173
@@ -243,7 +243,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]
aa8173
      SSL_SSLV3,
aa8173
      SSL_NOT_EXP | SSL_MEDIUM,
aa8173
      SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
aa8173
-     128,
aa8173
+     112,
aa8173
      128,
aa8173
      },
aa8173
 
aa8173
@@ -278,7 +278,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]
aa8173
      SSL_SSLV3,
aa8173
      SSL_NOT_EXP | SSL_MEDIUM,
aa8173
      SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
aa8173
-     128,
aa8173
+     112,
aa8173
      128,
aa8173
      },
aa8173
 #endif
aa8173
@@ -575,7 +575,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]
aa8173
      SSL_SSLV3,
aa8173
      SSL_NOT_DEFAULT | SSL_NOT_EXP | SSL_MEDIUM,
aa8173
      SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
aa8173
-     128,
aa8173
+     112,
aa8173
      128,
aa8173
      },
aa8173
 
aa8173
@@ -730,7 +730,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]
aa8173
      SSL_SSLV3,
aa8173
      SSL_NOT_EXP | SSL_MEDIUM,
aa8173
      SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
aa8173
-     128,
aa8173
+     112,
aa8173
      128,
aa8173
      },
aa8173
 
aa8173
@@ -746,7 +746,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]
aa8173
      SSL_SSLV3,
aa8173
      SSL_NOT_EXP | SSL_MEDIUM,
aa8173
      SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
aa8173
-     128,
aa8173
+     112,
aa8173
      128,
aa8173
      },
aa8173
 
aa8173
@@ -796,7 +796,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]
aa8173
      SSL_SSLV3,
aa8173
      SSL_NOT_EXP | SSL_MEDIUM,
aa8173
      SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
aa8173
-     128,
aa8173
+     112,
aa8173
      128,
aa8173
      },
aa8173
 
aa8173
@@ -812,7 +812,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]
aa8173
      SSL_SSLV3,
aa8173
      SSL_NOT_EXP | SSL_MEDIUM,
aa8173
      SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
aa8173
-     128,
aa8173
+     112,
aa8173
      128,
aa8173
      },
aa8173
 
aa8173
@@ -1429,7 +1429,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]
aa8173
      SSL_TLSV1,
aa8173
      SSL_NOT_EXP | SSL_MEDIUM,
aa8173
      SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
aa8173
-     128,
aa8173
+     112,
aa8173
      128,
aa8173
      },
aa8173
 #endif
aa8173
@@ -1714,7 +1714,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]
aa8173
      SSL_TLSV1,
aa8173
      SSL_NOT_EXP | SSL_MEDIUM,
aa8173
      SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
aa8173
-     128,
aa8173
+     112,
aa8173
      128,
aa8173
      },
aa8173
 
aa8173
@@ -2106,7 +2106,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]
aa8173
      SSL_TLSV1,
aa8173
      SSL_NOT_EXP | SSL_MEDIUM,
aa8173
      SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
aa8173
-     128,
aa8173
+     112,
aa8173
      128,
aa8173
      },
aa8173
 
aa8173
@@ -2186,7 +2186,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]
aa8173
      SSL_TLSV1,
aa8173
      SSL_NOT_EXP | SSL_MEDIUM,
aa8173
      SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
aa8173
-     128,
aa8173
+     112,
aa8173
      128,
aa8173
      },
aa8173
 
aa8173
@@ -2266,7 +2266,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]
aa8173
      SSL_TLSV1,
aa8173
      SSL_NOT_EXP | SSL_MEDIUM,
aa8173
      SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
aa8173
-     128,
aa8173
+     112,
aa8173
      128,
aa8173
      },
aa8173
 
aa8173
@@ -2346,7 +2346,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]
aa8173
      SSL_TLSV1,
aa8173
      SSL_NOT_EXP | SSL_MEDIUM,
aa8173
      SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
aa8173
-     128,
aa8173
+     112,
aa8173
      128,
aa8173
      },
aa8173
 
aa8173
@@ -2426,7 +2426,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]
aa8173
      SSL_TLSV1,
aa8173
      SSL_NOT_DEFAULT | SSL_NOT_EXP | SSL_MEDIUM,
aa8173
      SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
aa8173
-     128,
aa8173
+     112,
aa8173
      128,
aa8173
      },
aa8173