ports@,

With RC4 being replaced by ChaCha in libc's arc4random, is it good
practice to stop using it?

Index: chromium/files/chrome
===================================================================
RCS file: /cvs/ports/www/chromium/files/chrome,v
retrieving revision 1.9
diff -u -p -r1.9 chrome
--- chromium/files/chrome       17 May 2012 08:52:59 -0000      1.9
+++ chromium/files/chrome       4 Nov 2013 00:36:00 -0000
@@ -34,4 +34,9 @@ if [ -h ${HOME}/.config/chromium/Singlet
        fi
 fi
 
-exec "${TRUEPREFIX}/chrome/chrome" "${@}"
+#
+# cipher-suite-blacklist based on RFC 2246 codes
+# 0x0004 = TLS_RSA_WITH_RC4_128_MD5
+# 0x0005 = TLS_RSA_WITH_RC4_128_SHA
+#
+exec "${TRUEPREFIX}/chrome/chrome" --cipher-suite-blacklist=0x0005,0x0004 
"${@}"

Reply via email to