abrowser: avoid logjam attack

Copied from
http://git.savannah.gnu.org/cgit/gnuzilla.git/commit/?id=58f127c1d5f8c89b9e55803701f734756d1cfa2a
This commit is contained in:
Santiago Rodriguez 2015-06-25 03:24:25 +02:00
parent c477472af7
commit 71a340dea3
2 changed files with 8 additions and 1 deletions

View file

@ -175,3 +175,10 @@ pref("loop.enabled",false);
// Use old style preferences, that allow javascript to be disabled // Use old style preferences, that allow javascript to be disabled
pref("browser.preferences.inContent",false); pref("browser.preferences.inContent",false);
// Avoid logjam attack
pref("security.ssl3.dhe_rsa_aes_128_sha", false);
pref("security.ssl3.dhe_rsa_aes_256_sha", false);
pref("security.ssl3.dhe_dss_aes_128_sha", false);
pref("security.ssl3.dhe_rsa_des_ede3_sha", false);

View file

@ -18,7 +18,7 @@
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
# #
VERSION=38 VERSION=39
. ./config . ./config