From: Vitezslav Cizek <vcizek@suse.com>
Date: Mon, 10 Oct 2016 14:41:57 +0000 (+0200)
Subject: Degrade 3DES to MEDIUM in SSL2
X-Git-Tag: OpenSSL_1_0_2k~70
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=6d69dc56de8f0535be9ccabea7a8d4e61c04c2f1;p=oweals%2Fopenssl.git

Degrade 3DES to MEDIUM in SSL2

The SWEET32 fix moved 3DES from HIGH to MEDIUM, but omitted SSL2.

CLA: trivial
Reviewed-by: Kurt Roeckx <kurt@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/1683)
---

diff --git a/ssl/s2_lib.c b/ssl/s2_lib.c
index 88e67f083a..cc1360307b 100644
--- a/ssl/s2_lib.c
+++ b/ssl/s2_lib.c
@@ -254,7 +254,7 @@ OPENSSL_GLOBAL const SSL_CIPHER ssl2_ciphers[] = {
      SSL_3DES,
      SSL_MD5,
      SSL_SSLV2,
-     SSL_NOT_DEFAULT | SSL_NOT_EXP | SSL_HIGH,
+     SSL_NOT_DEFAULT | SSL_NOT_EXP | SSL_MEDIUM,
      0,
      112,
      168,