[erlang-bugs] ssl versions option is order dependent - can incorrectly disable cipher suites

Ransom Richardson ransomr@REDACTED
Thu May 1 15:29:35 CEST 2014


The issue is line 644 in ssl.erl:


   ciphers    = handle_cipher_option(proplists:get_value(ciphers, Opts, []), hd(Versions)),

If 'tlsv1.2' is in the versions list but not not the head, then any tlsv1.2 ciphers will be disabled.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://erlang.org/pipermail/erlang-bugs/attachments/20140501/21835ccf/attachment.htm>


More information about the erlang-bugs mailing list