TLS: Disable DHE_* ciphersuites in default clients

peterdettman · peterdettman · commit f9523961d11f · 2018-08-07T13:39:53.000+07:00
diff --git a/crypto/src/crypto/tls/DefaultTlsClient.cs b/crypto/src/crypto/tls/DefaultTlsClient.cs
@@ -42,12 +42,6 @@ public override int[] GetCipherSuites()
                 CipherSuite.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
                 CipherSuite.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,
                 CipherSuite.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,
-                CipherSuite.TLS_DHE_DSS_WITH_AES_128_GCM_SHA256,
-                CipherSuite.TLS_DHE_DSS_WITH_AES_128_CBC_SHA256,
-                CipherSuite.TLS_DHE_DSS_WITH_AES_128_CBC_SHA,
-                CipherSuite.TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,
-                CipherSuite.TLS_DHE_RSA_WITH_AES_128_CBC_SHA256,
-                CipherSuite.TLS_DHE_RSA_WITH_AES_128_CBC_SHA,
                 CipherSuite.TLS_RSA_WITH_AES_128_GCM_SHA256,
                 CipherSuite.TLS_RSA_WITH_AES_128_CBC_SHA256,
                 CipherSuite.TLS_RSA_WITH_AES_128_CBC_SHA,
diff --git a/crypto/src/crypto/tls/PskTlsClient.cs b/crypto/src/crypto/tls/PskTlsClient.cs
@@ -32,8 +32,6 @@ public override int[] GetCipherSuites()
             {
                 CipherSuite.TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256,
                 CipherSuite.TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA,
-                CipherSuite.TLS_DHE_PSK_WITH_AES_128_CBC_SHA256,
-                CipherSuite.TLS_DHE_PSK_WITH_AES_128_CBC_SHA
             };
         }
 

Original file line number	Diff line number	Diff line change
`@@ -32,8 +32,6 @@ public override int[] GetCipherSuites()`
`32`	`32`	`{`
`33`	`33`	`CipherSuite.TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256,`
`34`	`34`	`CipherSuite.TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA,`
`35`		`- CipherSuite.TLS_DHE_PSK_WITH_AES_128_CBC_SHA256,`
`36`		`- CipherSuite.TLS_DHE_PSK_WITH_AES_128_CBC_SHA`
`37`	`35`	`};`
`38`	`36`	`}`
`39`	`37`