August 2014 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 856916] New: Boot Instructions for Starting LSB: Kernel based NFS Daemon and SuSEfirewall2 Create Excessive Delays in Nominal Boot Times
by bugzilla_noreply＠novell.com 30 Aug '14

30 Aug '14

https://bugzilla.novell.com/show_bug.cgi?id=856916 https://bugzilla.novell.com/show_bug.cgi?id=856916#c0 Summary: Boot Instructions for Starting LSB: Kernel based NFS Daemon and SuSEfirewall2 Create Excessive Delays in Nominal Boot Times Classification: openSUSE Product: openSUSE 12.3 Version: Final Platform: x86-64 OS/Version: openSUSE 12.3 Status: NEW Severity: Normal Priority: P5 - None Component: Bootloader AssignedTo: jsrain(a)suse.com ReportedBy: secure(a)aphofis.com QAContact: jsrain(a)suse.com Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:26.0) Gecko/20100101 Firefox/26.0 May need reassignment to X.org...Not sure of What Component Classification to use at All???? :-) During normal boot there are two huge delays the first greater than 100 seconds the second greater than 45 seconds that slow a normal fast boot to be back as slow prior to LSB and UDEV. During my 3 x X_64 PC's boot standard boot from HDD the script stalls for greater than 100 second on my very powerful hardware. The first is LSB: start the kernel based NFS daemon... This takes longer than 100 second The second is LSB: start SuSEfirewall2... This takes longer than 45 seconds and all my X_64 Quad Core running above 3400 clicks with huge amounts of well resourced Video CPU and RAM and System RAM. Reproducible: Always Steps to Reproduce: 1. 2. 3. Expected Results: I would expect that a Daemon should load without any delays if indead we are just starting more daemons to run Kernel based functions. I can sort of understand NFS as it seems I'm the only one in the world to use NFS; but stage two of SuSEfirewall taking up to 45 seconds is nuts. Both modules should just load one after another despite existence of NFS and Firewall entries and or exceptions. Obviously you are going to need log files and I have 3 x X64 PC's that all exhibit this issue so could you be most clear about the log files you need and well take this one PC at a time if thats o.k with you -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 55

[Bug 892931] New: No Video/Audio Support From Native Installation and No Auto Updates from Nvidia
by bugzilla_noreply＠novell.com 30 Aug '14

30 Aug '14

https://bugzilla.novell.com/show_bug.cgi?id=892931 https://bugzilla.novell.com/show_bug.cgi?id=892931#c0 Summary: No Video/Audio Support From Native Installation and No Auto Updates from Nvidia Classification: openSUSE Product: openSUSE 13.1 Version: Final Platform: x86-64 OS/Version: openSUSE 13.1 Status: NEW Severity: Major Priority: P5 - None Component: X.Org AssignedTo: bnc-team-xorg-bugs(a)forge.provo.novell.com ReportedBy: secure(a)aphofis.com QAContact: xorg-maintainer-bugs(a)forge.provo.novell.com Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Firefox/31.0 Perfect and Seamless Video/Audio Support was available in 12.3! After Installation and Online Updates and adding Nvidia Reop there is no monitor identified in KDE>System Stetting>Monitor>Display Configuration There is Identifiable Information in both Screen Locker and Gamma correction of this Module. Yast can clearly identify the Video Card detection as a Nvidia GT200 [GeForce 210] and complete Hardware List. Video is connected via HDMI as normal however both Video/Audio this was perfect in 12.3 All support comes from Native Suse.de drivers Installed latest rebuild of change log support was 04 Jul 20014 EST: sndirsch(a)suse.de I am tempted to resign to kernel, however there are various files I know you'll need for this and other Installation and Storage and NFS Bugs etc. etc. before I trash this PC and revert back to 12.3 There are so many files I could attach in respect to this bug but I don’t know where to begin so I'll leave it to you to ask. Yast HW list will be one etc. etc. etc...Tell me how I can help with files and logs please as I want to trash this install and revert as soon as possible Reproducible: Always Steps to Reproduce: 1. 2. 3. Actual Results: No Video/Audio Support From Native Installation and No Auto Updates from Nvidia Expected Results: Exactly what is did in 12.3 There are so many files I could attach in respect to this bug but I don’t know where to begin so I'll leave it to you to ask. Yast HW list will be one etc. etc. etc...Tell me how I can help with files and logs please as I want to trash this install and revert as soon as possible -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 7

[Bug 892593] New: Documentation:Tools/tesseract: Crashes on Factory
by bugzilla_noreply＠novell.com 29 Aug '14

29 Aug '14

https://bugzilla.novell.com/show_bug.cgi?id=892593 https://bugzilla.novell.com/show_bug.cgi?id=892593#c0 Summary: Documentation:Tools/tesseract: Crashes on Factory Classification: openSUSE Product: openSUSE.org Version: unspecified Platform: x86-64 OS/Version: openSUSE 13.2 Status: NEW Severity: Normal Priority: P5 - None Component: 3rd party software AssignedTo: thomas.schraitle(a)suse.com ReportedBy: 9(a)cirno.systems QAContact: opensuse-communityscreening(a)forge.provo.novell.com CC: fs(a)suse.com Found By: --- Blocker: --- libtesseract3 now crashes on Factory: #0 0x00007ffff788c1d2 in STRING::operator=(STRING const&) () from /usr/lib64/libtesseract.so.3 #1 0x00007ffff773809b in tesseract::Tesseract::ParseLanguageString(char const*, GenericVector<STRING>*, GenericVector<STRING>*) () from /usr/lib64/libtesseract.so.3 #2 0x00007ffff7738391 in tesseract::Tesseract::init_tesseract(char const*, char const*, char const*, tesseract::OcrEngineMode, char**, int, GenericVector<STRING> const*, GenericVector<STRING> const*, bool) () from /usr/lib64/libtesseract.so.3 #3 0x00007ffff76ebccc in tesseract::TessBaseAPI::Init(char const*, char const*, tesseract::OcrEngineMode, char**, int, GenericVector<STRING> const*, GenericVector<STRING> const*, bool) () from /usr/lib64/libtesseract.so.3 #4 0x0000000000401b2f in Init (language=0x0, datapath=<optimized out>, this=0x7fffffffdea0) at ../api/baseapi.h:210 #5 main (argc=1, argv=0x7fffffffe048) at ../api/tesseractmain.cpp:76 This can be reproduced by just running the tesseract command line tool without any arguments. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 2

[Bug 894214] New: kiwi: AArch64 fails to install u-boot
by bugzilla_noreply＠novell.com 29 Aug '14

29 Aug '14

https://bugzilla.novell.com/show_bug.cgi?id=894214 https://bugzilla.novell.com/show_bug.cgi?id=894214#c0 Summary: kiwi: AArch64 fails to install u-boot Classification: openSUSE Product: openSUSE Factory Version: 201408* Platform: aarch64 OS/Version: Other Status: NEW Severity: Major Priority: P5 - None Component: Installation AssignedTo: ms(a)suse.com ReportedBy: agraf(a)suse.com QAContact: jsrain(a)suse.com Found By: --- Blocker: --- When I create an AArch64 image with u-boot, kiwi complains that it can't install u-boot because it doesn't know how to do so for AArch64. However, we really only need it to be the same way as on 32bit ARM: [ 654.620765] Creating boot loader configuration [ 654.666999] *** boot loader setup for aarch64(none):/ # [...] [ 7.973787] *** boot loader install for aarch64-uboot not implemented *** + systemException '*** boot loader setup for aarch64-uboot not implemented ***' reboot -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 2

[Bug 792934] New: Insufficient quoting in rss feeds
by bugzilla_noreply＠novell.com 29 Aug '14

29 Aug '14

https://bugzilla.novell.com/show_bug.cgi?id=792934 https://bugzilla.novell.com/show_bug.cgi?id=792934#c0 Summary: Insufficient quoting in rss feeds Classification: openSUSE Product: openSUSE.org Version: unspecified Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: Hermes AssignedTo: roland.haidl(a)suse.com ReportedBy: schwab(a)suse.com QAContact: adrian(a)suse.com Found By: --- Blocker: --- The <description> contents in each <item> are not properly HTML encoded. For example, in the following <item> from <https://hermes.opensuse.org/feeds/25547.rdf>: <item> <title>OBS devel:languages:python/python-django-dajaxice r23 commited</title> <description><pre> Committer: buildservice-autocommit New Revision: 23 Log: baserev update by copy to link target Modified: _link Index: _link =================================================================== --- _link (revision 22) +++ _link (revision 23) @@ -1,4 +1,4 @@ -<link project="openSUSE:Factory" baserev="2306579a2c4eba908b8e6cdd39ea46dc"> +<link project="openSUSE:Factory" baserev="983d12c91b9bf6ac3d07ae83a76d2707"> <patches> <branch/> </patches> To compare against the previous version: osc rdiff devel:languages:python python-django-dajaxice Check out the package for editing: osc checkout devel:languages:python python-django-dajaxice -- Hermes messaging (http://hermes.opensuse.org) openSUSE Build Service (https://build.opensuse.org/) </pre></description> <author>hermes(a)opensuse.org</author> <pubDate>2012-12-05T14:20:02+01:00</pubDate> <link>https://hermes.opensuse.org/messages/17692531</link> <guid>https://hermes.opensuse.org/messages/17692531</guid> </item> After XML decoding of the <description> contents the body of <pre> contains non-HTML tags like <link> and <patches>. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 3

[Bug 891629] New: gwenview via kipi plugins no longer does flickr upload
by bugzilla_noreply＠novell.com 29 Aug '14

29 Aug '14

https://bugzilla.novell.com/show_bug.cgi?id=891629 https://bugzilla.novell.com/show_bug.cgi?id=891629#c0 Summary: gwenview via kipi plugins no longer does flickr upload Classification: openSUSE Product: openSUSE 13.1 Version: Final Platform: Other OS/Version: Other Status: NEW Severity: Major Priority: P5 - None Component: KDE4 Applications AssignedTo: kde-maintainers(a)suse.de ReportedBy: meissner(a)suse.com QAContact: qa-bugs(a)suse.de Found By: --- Blocker: --- flickr seems to have changed, i can no longer use gwenview -> Export to Flickr to upload pictures to flickr. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 9

[Bug 894189] New: Error on connecting Mobile Device to download photos
by bugzilla_noreply＠novell.com 29 Aug '14

29 Aug '14

https://bugzilla.novell.com/show_bug.cgi?id=894189 https://bugzilla.novell.com/show_bug.cgi?id=894189#c0 Summary: Error on connecting Mobile Device to download photos Classification: openSUSE Product: openSUSE 13.1 Version: Final Platform: x86-64 OS/Version: openSUSE 13.1 Status: NEW Severity: Normal Priority: P5 - None Component: Other AssignedTo: bnc-team-screening(a)forge.provo.novell.com ReportedBy: cbranston(a)suse.com QAContact: qa-bugs(a)suse.de Found By: Community User Blocker: No On connecting my Sony Xperia E1 to openSuse ver 13.1 via USB, the device get's recognized, but when trying to access the file system via dolphin, errors get issued. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 3

[Bug 889754] New: please provide https - support for all buildservice repositories at download.opensuse.org
by bugzilla_noreply＠novell.com 29 Aug '14

29 Aug '14

https://bugzilla.novell.com/show_bug.cgi?id=889754 https://bugzilla.novell.com/show_bug.cgi?id=889754#c0 Summary: please provide https - support for all buildservice repositories at download.opensuse.org Classification: openSUSE Product: openSUSE.org Version: unspecified Platform: All OS/Version: All Status: NEW Severity: Major Priority: P5 - None Component: BuildService AssignedTo: bnc-team-screening(a)forge.provo.novell.com ReportedBy: estellnb(a)elstel.org QAContact: adrian(a)suse.com Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (OS/2; Warp 4.5; rv:24.0) Gecko/20100101 Firefox/24.0 Currently the build service repositories at download.opensuse.org can only be reached via http which is insufficient as every repository has its own key. At least the public gpg-key for each repo would need to be fetched via a secure and authenticated connection. However the best solution would be to provide all of download.opensuse.org at least via https, better also secured with DNSSEC (Bug 690867). That way one could also download individual packages securely via https. Reproducible: Always -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 7

[Bug 894162] New: perl-CGI obsolete, need cpan package
by bugzilla_noreply＠novell.com 29 Aug '14

29 Aug '14

https://bugzilla.novell.com/show_bug.cgi?id=894162 https://bugzilla.novell.com/show_bug.cgi?id=894162#c0 Summary: perl-CGI obsolete, need cpan package Classification: openSUSE Product: openSUSE Factory Version: 201408* Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem AssignedTo: mls(a)suse.com ReportedBy: lnussel(a)suse.com QAContact: qa-bugs(a)suse.de Found By: --- Blocker: --- CGI.pm says this: CGI::Util will be removed from the Perl core distribution in the next major release. Please install it from CPAN. It is being used at /usr/lib/perl5/5.20.0/CGI.pm, line 29. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 1

[Bug 865241] New: Konqueror allows insecure cipher suites with keys smaller than 128 bits
by bugzilla_noreply＠novell.com 29 Aug '14

29 Aug '14

https://bugzilla.novell.com/show_bug.cgi?id=865241 https://bugzilla.novell.com/show_bug.cgi?id=865241#c0 Summary: Konqueror allows insecure cipher suites with keys smaller than 128 bits Classification: openSUSE Product: openSUSE 13.1 Version: Final Platform: All OS/Version: openSUSE 13.1 Status: NEW Severity: Major Priority: P5 - None Component: KDE4 Applications AssignedTo: kde-maintainers(a)suse.de ReportedBy: mlj(a)chase.eclipse.co.uk QAContact: qa-bugs(a)suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:27.0) Gecko/20100101 Firefox/27.0 While following up on recent iOS/Safari SSL/TLS security bug, checked Konqueror at site https://www.howsmyssl.com/ and discovered it allows cipher suites with less than 128 bit encryption: Vis: Your client supports cipher suites that are known to be insecure: TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA: This cipher uses keys smaller than 128 bits in its encryption. TLS_DHE_DSS_WITH_DES_CBC_SHA: This cipher uses keys smaller than 128 bits in its encryption. TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA: This cipher uses keys smaller than 128 bits in its encryption. TLS_DHE_RSA_WITH_DES_CBC_SHA: This cipher uses keys smaller than 128 bits in its encryption. TLS_RSA_EXPORT_WITH_DES40_CBC_SHA: This cipher uses keys smaller than 128 bits in its encryption. TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5: This cipher uses keys smaller than 128 bits in its encryption. TLS_RSA_EXPORT_WITH_RC4_40_MD5: This cipher uses keys smaller than 128 bits in its encryption. TLS_RSA_WITH_DES_CBC_SHA: This cipher uses keys smaller than 128 bits in its encryption. As I can not disable these cypher suites in Konqueror as far as I can see, I suspect KDE is lifting all installed default cipher suites from some where else in the system. Is it openSSL/ libgnutls28 / libopenssl1_0_0 / ca-certificates - I do not know enough. At least it can not be or mozilla-nss / ca-certificates-mozilla as Firefox is fine. Certainly a fix will need testing before roll out in case it breaks some legacy security. No d Reproducible: Always Steps to Reproduce: 1.Open Konqueror 2.Go to site https://www.howsmyssl.com/ 3. List of insecure cipher suites detected Actual Results: Version Good Your client is using TLS 1.2, the most modern version of the encryption protocol. It gives you access to the fastest, most secure encryption possible on the web. Learn More Ephemeral Key Support Good Ephemeral keys are used in some of the cipher suites your client supports. This means your client may be used to provide forward secrecy if the server supports it. This greatly increases your protection against snoopers, including global passive adversaries who scoop up large amounts of encrypted traffic and store them until their attacks (or their computers) improve. Learn More Session Ticket Support Good Session tickets are supported in your client. Services you use will be able to scale out their TLS connections more easily with this feature. Learn More TLS Compression Good Your TLS client does not attempt to compress the settings that encrypt your connection, avoiding information leaks from the CRIME attack. Learn More BEAST Vulnerability Good Your client is not vulnerable to the BEAST attack because it's using a TLS protocol newer than TLS 1.0. The BEAST attack is only possibly against clients using TLS 1.0 or earlier using Cipher-Block Chaining cipher suites that do not implement the 1/n-1 record splitting mitigation. Learn More Insecure Cipher Suites Bad Your client supports cipher suites that are known to be insecure: TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA: This cipher uses keys smaller than 128 bits in its encryption. TLS_DHE_DSS_WITH_DES_CBC_SHA: This cipher uses keys smaller than 128 bits in its encryption. TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA: This cipher uses keys smaller than 128 bits in its encryption. TLS_DHE_RSA_WITH_DES_CBC_SHA: This cipher uses keys smaller than 128 bits in its encryption. TLS_RSA_EXPORT_WITH_DES40_CBC_SHA: This cipher uses keys smaller than 128 bits in its encryption. TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5: This cipher uses keys smaller than 128 bits in its encryption. TLS_RSA_EXPORT_WITH_RC4_40_MD5: This cipher uses keys smaller than 128 bits in its encryption. TLS_RSA_WITH_DES_CBC_SHA: This cipher uses keys smaller than 128 bits in its encryption. Learn More Given Cipher Suites The cipher suites your client said it supports, in the order it sent them, are: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA TLS_DHE_DSS_WITH_AES_256_CBC_SHA TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384 TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 TLS_ECDH_RSA_WITH_AES_256_CBC_SHA TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA TLS_RSA_WITH_AES_256_GCM_SHA384 TLS_RSA_WITH_AES_256_CBC_SHA256 TLS_RSA_WITH_AES_256_CBC_SHA TLS_RSA_WITH_CAMELLIA_256_CBC_SHA TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA TLS_RSA_WITH_3DES_EDE_CBC_SHA TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA TLS_DHE_DSS_WITH_AES_128_GCM_SHA256 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 TLS_DHE_RSA_WITH_AES_128_CBC_SHA TLS_DHE_DSS_WITH_AES_128_CBC_SHA TLS_DHE_RSA_WITH_SEED_CBC_SHA TLS_DHE_DSS_WITH_SEED_CBC_SHA TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256 TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256 TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256 TLS_ECDH_RSA_WITH_AES_128_CBC_SHA TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_AES_128_GCM_SHA256 TLS_RSA_WITH_AES_128_CBC_SHA256 TLS_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_SEED_CBC_SHA TLS_RSA_WITH_CAMELLIA_128_CBC_SHA TLS_ECDHE_RSA_WITH_RC4_128_SHA TLS_ECDHE_ECDSA_WITH_RC4_128_SHA TLS_ECDH_RSA_WITH_RC4_128_SHA TLS_ECDH_ECDSA_WITH_RC4_128_SHA TLS_RSA_WITH_RC4_128_SHA TLS_RSA_WITH_RC4_128_MD5 TLS_DHE_RSA_WITH_DES_CBC_SHA TLS_DHE_DSS_WITH_DES_CBC_SHA TLS_RSA_WITH_DES_CBC_SHA TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA TLS_RSA_EXPORT_WITH_DES40_CBC_SHA TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5 TLS_RSA_EXPORT_WITH_RC4_40_MD5 TLS_EMPTY_RENEGOTIATION_INFO_SCSV Expected Results: TLS Compression Good Your TLS client does not attempt to compress the settings that encrypt your connection, avoiding information leaks from the CRIME attack. Learn More BEAST Vulnerability Good Your client is not vulnerable to the BEAST attack because it's using a TLS protocol newer than TLS 1.0. The BEAST attack is only possibly against clients using TLS 1.0 or earlier using Cipher-Block Chaining cipher suites that do not implement the 1/n-1 record splitting mitigation. Learn More Insecure Cipher Suites Good Your client doesn't use any cipher suites that are known to be insecure. Learn More Given Cipher Suites The cipher suites your client said it supports, in the order it sent them, are: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA TLS_ECDHE_ECDSA_WITH_RC4_128_SHA TLS_ECDHE_RSA_WITH_RC4_128_SHA TLS_DHE_RSA_WITH_AES_128_CBC_SHA TLS_DHE_DSS_WITH_AES_128_CBC_SHA TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA TLS_DHE_RSA_WITH_AES_256_CBC_SHA TLS_DHE_DSS_WITH_AES_256_CBC_SHA TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA TLS_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_CAMELLIA_128_CBC_SHA TLS_RSA_WITH_AES_256_CBC_SHA TLS_RSA_WITH_CAMELLIA_256_CBC_SHA TLS_RSA_WITH_3DES_EDE_CBC_SHA TLS_RSA_WITH_RC4_128_SHA TLS_RSA_WITH_RC4_128_MD5 Konqueror on openSuse 11.4 evergreen has this bug and also fails by offering TSL 1.0, and is open to Beast attack as it uses cypher suites that use Cypher-chain blocking. Mind you Firefox up to ver 24 was using TSL 1.0.as well on this system. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 9