Jira (PUP-2177) PR (2494) Insecure shipped Cipher settings in Passenger example config

[Joshua Cooper (JIRA)]

Title: Message Title

Joshua Cooper commented on an issue   Re: PR (2494) Insecure shipped Cipher settings in Passenger example config This PR is blocked. It turns out that certain versions of openssl (0.9.8) exclude the DHE (ephemeral Diffie-Hellman) set of ciphers, and as a result, with the proposed change, it results in AES-128 being selected, even though AES-256 should be possible. Waiting on contributor to fixup PR in a way that doesn't reduce security. Add Comment   Puppet / PUP-2177 PR (2494) Insecure shipped Cipher settings in Passenger example config https://github.com/puppetlabs/puppet/pull/2494 This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.