fix incorrect strength bit values for certain Kerberos ciphersuites

Submitted by: Victor Duchovni

diff --git a/ssl/s3_lib.c b/ssl/s3_lib.c
index 98e7630b0f56b7ffb9b1fd17ee82ec79707d0fad..bdb8923972ac6c42ac4b0c3f6619580aa574c2b6 100644 (file)
--- a/ssl/s3_lib.c
+++ b/ssl/s3_lib.c
@@ -557,7 +557,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]={
        SSL_kKRB5|SSL_aKRB5|  SSL_3DES|SSL_SHA1  |SSL_SSLV3,
        SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
        0,
-       112,
+       168,
        168,
        SSL_ALL_CIPHERS,
        SSL_ALL_STRENGTHS,
@@ -613,7 +613,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]={
        SSL_kKRB5|SSL_aKRB5|  SSL_3DES|SSL_MD5   |SSL_SSLV3,
        SSL_NOT_EXP|SSL_HIGH,
        0,
-       112,
+       168,
        168,
        SSL_ALL_CIPHERS,
        SSL_ALL_STRENGTHS,
@@ -683,7 +683,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]={
        SSL_kKRB5|SSL_aKRB5|  SSL_RC4|SSL_SHA1   |SSL_SSLV3,
        SSL_EXPORT|SSL_EXP40,
        0,
-       128,
+       40,
        128,
        SSL_ALL_CIPHERS,
        SSL_ALL_STRENGTHS,
@@ -725,7 +725,7 @@ OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]={
        SSL_kKRB5|SSL_aKRB5|  SSL_RC4|SSL_MD5    |SSL_SSLV3,
        SSL_EXPORT|SSL_EXP40,
        0,
-       128,
+       40,
        128,
        SSL_ALL_CIPHERS,
        SSL_ALL_STRENGTHS,