Issue #7191 has been updated by Daniel Pittman.

> Really, you think we should concern ourselves at this point with if AES is
> secure enough? I think given the amount of peer review and recent acceptance
> as standard that this should not be a concern.

No, I think we are better off letting people change the entire suite
in one shot, rather than tweak parts of it.  However, the code to
implement that looks reasonable, and I am not overly invested in the
solution.  I expect that we will eventually be called on to add the
"whole set" tweak, but don't care short of then.

So, ship it. ;)
----------------------------------------
Bug #7191: The AES key size used by M::SSL should be configurable
https://projects.puppetlabs.com/issues/7191

Author: R.I. Pienaar
Status: Accepted
Priority: Normal
Assignee: R.I. Pienaar
Category: Core
Target version: 1.1.5
Keywords: 
Branch: ripienaar/marionette-collective/feature/master/7191
Affected mCollective version: 


Currently the SSL class has aes-256-cbc hardcoded, this is the largest keysize 
and should also be the slowest additionally it will be problematic on JRuby as 
it requires additional tweaking.

Make it support 128, 192 or 256 in the config file.


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en.

Reply via email to