[obs-commits] [openSUSE/osc] 077047: watchout the BEAST...

Branch: refs/heads/master Home: https://github.com/openSUSE/osc Commit: 077047059629cb1a18e74d2425bf2d72f9c8d29f https://github.com/openSUSE/osc/commit/077047059629cb1a18e74d2425bf2d72f9c8d... Author: Cristian Rodríguez Date: 2012-07-15 (Sun, 15 Jul 2012) Changed paths: M osc/oscssl.py Log Message: ----------- watchout the BEAST... This patch workarounds the BEAST attack in the client side making OSC to prefer TLS v1.1 or v1.2 ciphers/key exchanges when available. Now, as long as openSUSE API webservers do not support these protocols it will prefer the RC4-SHA1 combination to be in the safe side. Commit: 9446307c12b5ca8167214293a465c7e565aee247 https://github.com/openSUSE/osc/commit/9446307c12b5ca8167214293a465c7e565aee... Author: Adrian Schröter Date: 2012-07-16 (Mon, 16 Jul 2012) Changed paths: M osc/oscssl.py Log Message: ----------- Merge pull request #7 from crrodriguez/master The BEAST is gonna get ya... Compare: https://github.com/openSUSE/osc/compare/a0cad9f88d84...9446307c12b5