<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
First and foremost: <br>
You should <strong>not</strong> base any branches on a '<code>pu'</code>
branch, as they will frequently be rebuilt from scratch on top of
the current development branch.<br>
Base branches upon 'master' or 'maint' depending on where we are in
the release cycle and if it is a feature or a bug etc. <br>
More information here:
<a class="moz-txt-link-freetext" href="https://github.com/erlang/otp/wiki/Submitting-patches">https://github.com/erlang/otp/wiki/Submitting-patches</a><br>
<br>
Secondly: Thank you for your contribution, I have rebased your
branch upon 'master' and included it in 'master-pu'<br>
<br>
If this are to be included in master, you will most likely have to
add this in the documentation, and in the test.<br>
<br>
<br>
<br>
<div class="moz-cite-prefix">On 10/18/2012 07:24 PM, Andreas Schultz
wrote:<br>
</div>
<blockquote
cite="mid:811675695.274384.1350581093025.JavaMail.root@tpip.net"
type="cite">
<pre wrap="">Hi,
Here are two changes to improve TLS 1.2 higher strength sha hashes.
There is this comment in ssl_cipher:
%% Currently no supported cipher suites defaults to sha384 or sha512
%% so these clauses are not needed at the moment.
I'm afraid that this is wrong. With TLS 1.2 the actual hash being used
can be negotiated and is not longer fixed to the one specified in the
cipher suite. So it is possible to end up with a stronger cipher even
when we don't default to one.
The other change adds sha224 to list of support and announced ciphers.
It might not be as good as sha256, but should still be stronger that
sha1.
<a class="moz-txt-link-freetext" href="https://github.com/RoadRunnr/otp/compare/master-pu...ssl-sha224-fixes">https://github.com/RoadRunnr/otp/compare/master-pu...ssl-sha224-fixes</a>
<a class="moz-txt-link-freetext" href="https://github.com/RoadRunnr/otp/compare/master-pu...ssl-sha224-fixes.patch">https://github.com/RoadRunnr/otp/compare/master-pu...ssl-sha224-fixes.patch</a>
Both changes should apply cleanly on master and master-pu.
Andreas
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
/Henrik Nord Erlang/OTP</pre>
</body>
</html>