the-djmaze/snappymail
1
1
Fork 0
mirror of https://github.com/the-djmaze/snappymail.git synced 2025-02-24 06:47:05 +08:00
Code Issues Projects Releases Packages Wiki Activity

Filter more disallowed openssl ciphers thanks to @gene-git #641

Browse source
This commit is contained in:
the-djmaze 2022-11-09 12:14:57 +01:00
parent 1d629209b4
commit 8f37226b76
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
snappymail/v/0.0.0/app/libraries/snappymail/crypt.php
View file

@ -18,7 +18,8 @@ abstract class Crypt
$list = \array_diff($list, \array_map('strtoupper',$list));
$list = \array_filter($list, function($v){
// DES/ECB/bf/rc insecure, GCM/CCM not supported
return !\preg_match('/(^(des|bf|rc))|-(ecb|gcm|ccm|ocb)|wrap/i', $v);
// AEAD
return !\preg_match('/(^(des|bf|rc))|-(ecb|gcm|ccm|ocb|siv|cts)|wrap/i', $v);
});
\natcasesort($list);
}