CCM ciphers were wrongly handled due to shorter name
n0lz opened this issue · 2 comments
n0lz commented
The CCM (8) mode was shown as the hash algorithm which is wrong.
Quick & Dirty fix was to delete all CCM ciphers from the database, editing the cipher suite parsing code, then to reimport all ciphers.
Following edit in the signals.py was made:
` # split enc again if we only got a number for hsh
# specifically needed for 'CCM 8' hash algorithm
#if re.match(r'\d+', hsh.strip()):
# (enc,_,ccm) = enc.rpartition(" ")
# hsh = ccm + " " + hsh
if re.match(r'\d+', hsh.strip()):
(enc,_,ccm) = enc.rpartition(" ")
enc = enc + " " + ccm + " 8"
hsh = "SHA256"
if re.match(r'CCM\Z', hsh.strip()):
(enc,_,ccm) = enc.rpartition(" ")
enc = enc + " " + ccm + " CCM"
hsh = "SHA256"`
n0lz commented
Fixed with staging fix.
n0lz commented
Fix deployed