Bug 723056

Summary:	>=dev-libs/openssl-1.1.0: Add use flag to enable weak ciphers
Product:	Gentoo Linux	Reporter:	Scott Dial <scott>
Component:	Current packages	Assignee:	Gentoo's Team for Core System packages <base-system>
Status:	RESOLVED FIXED
Severity:	normal	CC:	bertrand
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
See Also:	https://bugs.gentoo.org/show_bug.cgi?id=510798
Whiteboard:
Package list:		Runtime testing required:	---

Description Scott Dial 2020-05-14 15:49:19 UTC

OpenSSL 1.1.0 introduced an "enable-weak-ssl-ciphers" option to the Configure script. This option needs to be enabled to build RC4 and 3DES ciphers. It's a sensible default to not build those ciphers, but there use cases where compatibility with legacy clients is needed. It would be useful to add a "weak-ssl-ciphers" USE flag to enable this Configure option.

Comment 1 Larry the Git Cow gentoo-dev

2022-04-11 00:46:00 UTC

The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=ce66429a7a58f0745e56644fa9f88d68a9edcdee

commit ce66429a7a58f0745e56644fa9f88d68a9edcdee
Author:     Mike Gilbert <floppym@gentoo.org>
AuthorDate: 2022-04-11 00:39:54 +0000
Commit:     Mike Gilbert <floppym@gentoo.org>
CommitDate: 2022-04-11 00:45:02 +0000

    dev-libs/openssl: add 'weak-ssl-ciphers' USE flag
    
    Closes: https://bugs.gentoo.org/723056
    Signed-off-by: Mike Gilbert <floppym@gentoo.org>

 dev-libs/openssl/metadata.xml          | 1 +
 dev-libs/openssl/openssl-1.1.1n.ebuild | 3 ++-
 dev-libs/openssl/openssl-3.0.2.ebuild  | 3 ++-
 3 files changed, 5 insertions(+), 2 deletions(-)