Skip to content

Commit 9533a6b

Browse files
committed
WL#16353, Refresh the list of acceptable TLS ciphers.
Change-Id: I90420e6a18205e6791915d2a9d0902e1d3cfd266
1 parent 22b061b commit 9533a6b

File tree

2 files changed

+8
-7
lines changed

2 files changed

+8
-7
lines changed

CHANGES

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,8 @@
33

44
Version 9.0.0
55

6+
- WL#16353, Refresh the list of acceptable TLS ciphers.
7+
68
- Fix for Bug#114687 (Bug#36529541), Tests fail after mysql_native_password has been made optional in server.
79

810
- WL#16319, Remove deprecated insensitive terminology based methods.

src/main/resources/com/mysql/cj/TlsSettings.properties

Lines changed: 6 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -32,16 +32,16 @@ TLSCiphers.Approved=\
3232
ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,\
3333
ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256,\
3434
ECDHE_ECDSA_WITH_AES_256_CCM,\
35-
ECDHE_ECDSA_WITH_AES_128_CCM,\
36-
DHE_RSA_WITH_AES_128_GCM_SHA256,\
37-
DHE_RSA_WITH_AES_256_GCM_SHA384,\
38-
DHE_RSA_WITH_AES_256_CCM,\
39-
DHE_RSA_WITH_AES_128_CCM,\
40-
DHE_RSA_WITH_CHACHA20_POLY1305_SHA256
35+
ECDHE_ECDSA_WITH_AES_128_CCM
4136

4237
# Deprecated TLS Ciphers
4338
TLSCiphers.Deprecated=\
4439
AES_128_CCM_8_SHA256,\
40+
DHE_RSA_WITH_AES_128_GCM_SHA256,\
41+
DHE_RSA_WITH_AES_256_GCM_SHA384,\
42+
DHE_RSA_WITH_AES_256_CCM,\
43+
DHE_RSA_WITH_AES_128_CCM,\
44+
DHE_RSA_WITH_CHACHA20_POLY1305_SHA256,\
4545
ECDHE_ECDSA_WITH_AES_256_CCM_8,\
4646
ECDHE_ECDSA_WITH_AES_128_CCM_8,\
4747
DHE_RSA_WITH_AES_256_CCM_8,\
@@ -93,6 +93,5 @@ TLSCiphers.Deprecated=\
9393
ECDH_RSA_WITH_AES_128_GCM_SHA256,\
9494
ECDH_RSA_WITH_AES_256_GCM_SHA384
9595

96-
9796
# Unacceptable TLS Ciphers
9897
TLSCiphers.Unacceptable.Mask=_ANON_,_NULL_,_EXPORT,_MD5,_DES,_3DES_,_RC2_,_RC4_,_PSK_,_DH_

0 commit comments

Comments
 (0)