File tree Expand file tree Collapse file tree 1 file changed +7
-8
lines changed Expand file tree Collapse file tree 1 file changed +7
-8
lines changed Original file line number Diff line number Diff line change @@ -35,14 +35,13 @@ add_unbroken_ciphers_default(Opts) ->
3535 [{ciphers , Ciphers } | proplists :delete (ciphers , Opts )].
3636
3737filter_broken_cipher_suites (Ciphers ) ->
38- case proplists :get_value (ssl_app , ssl :versions ()) of
39- " 5.3" ++ _ ->
40- lists :filter (fun (Suite ) ->
41- string :left (atom_to_list (element (1 , Suite )), 4 ) =/= " ecdh"
42- end , Ciphers );
43- _ ->
44- Ciphers
45- end .
38+ % This was intended to remove any cipher that has "ecdh", however it makes
39+ % assumptions that the ciphers are passed in their non-binary format e.g.
40+ % without conversion using
41+ % https://github.com/erlang/otp/blob/OTP_R16B03/lib/ssl/src/ssl_cipher.erl#L750-L857
42+ % So we ignore the filter for now. The filter should be re-applied in riak_core
43+ % prior to any conversion.
44+ Ciphers .
4645
4746filter_unsecure_cipher_suites (Ciphers ) ->
4847 lists :filter (fun
You can’t perform that action at this time.
0 commit comments