Re: Disable certain ciphers and hashing algorithms while building FF and TB

--===============2523475186929147510==
Content-Type: multipart/signed; boundary="nextPart51012699.ygfzxBG2oR"; micalg="pgp-sha512"; protocol="application/pgp-signature"

--nextPart51012699.ygfzxBG2oR
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="UTF-8"

On Tuesday, 13 March 2018 11:15:18 CEST f masood via dev-security wrote:
> On Tuesday, January 23, 2018 at 9:39:46 AM UTC+5, f masood wrote:
> > 1 I am building Mozilla Firefox and Mozilla Thunderbird 52 versions from
> > source code.
> >=20
> > 2 By default all the ciphers and hashing algorithms are enabled while
> > building those two applications.
> >=20
> > 3 How can I disable certain ciphers and hashing algos while building th=
ese
> > two applications ? Can I specify in the CONF file or something ?
> >=20
> > 4 e.g I want to disable ALL other ciphers just one AES to be enabled
> > I want to disable ALL other hashing algorithms just one SHA256 to be
> > enabled
> >=20
> > (I know the above can have issues while communicating with major
> > websites/email server)
> PING !!!

not when building, but you can do it at runtime using the policy mechanism=
=20
used by Fedora:
https://fedoraproject.org/wiki/Changes/StrongCryptoSettings
https://fedoraproject.org/wiki/Changes/CryptoPolicy

=2D-=20
Regards,
Hubert Kario
Senior Quality Engineer, QE BaseOS Security team
Web: www.cz.redhat.com
Red Hat Czech s.r.o., Purky=C5=88ova 115, 612 00  Brno, Czech Republic
--nextPart51012699.ygfzxBG2oR
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part.
Content-Transfer-Encoding: 7Bit

-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEEYeeuxEU+3unL/K+dkqjRuAHS9fUFAls2CnIACgkQkqjRuAHS
9fX9KQ/+KT6AdPlqdSkEv9sZ6i6wCXUzEzQFdTkXRvo6BSvhwVC9FnfxA3dlSq6m
vettoWNo7LHCRX0tRVqdworNyt6Wa9yVAyn1jaDwsfIYyYXC7IKgBRoIh1sRk3lJ
S+jk9Npp82/KodSRWJr6kVe0DxG2Wl6XZPwwE9XERPXP2pnUlMjS0LIUoL1oDkTL
nkERyiXvUXBOqmAjardT/q/q05GWapxRicZ5aXdbJ0m9owCGquhziArihtgwG1BA
i73aIACcTuRw72qek5SwN69g273tKcDdQ5GuPFAnSIz7HFrnieni0EmSNSd0ULLo
AVqaro3+Y2lgH86GeTlIZMbySm2r24gS6n9KQXdCc6Lu5Otl7zJKM7z+4f7g4QV2
ddGN9etzSvakVh5GCQdlSwjF1OtUWq1xkGCbYTRBXrwF8XqEt1b4Zo4kq+lvqEIh
Pbu1bVSRyokZreHDrh2GRajOWyKtLiXQlqb5ay3HdOuwmkIezB1GXFUXCSQVmPNz
PkLlIf8fX6yptKlVEhX6G2Jd6IXUzlWX1aN2Py2v3IgiMVS6x9ieK+xpa6BG9vrs
l9hfWp95Bk3BSY6gyYeKFD1N/Atrr0HFmBvW0CV8h3DL/Inr4g+SzLLum6z0BzW3
+rRR/grWtE5Dlp3V/UA/y+CEqmaVcIF2yj2Gu1F+lvpNns6PjzU=
=Ko49
-----END PGP SIGNATURE-----

--nextPart51012699.ygfzxBG2oR--




--===============2523475186929147510==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security

--===============2523475186929147510==--