Removed DHE SSL ciphers to fix issue #270

Rocketct · sandeepmistry · commit 3301d03f82e5 · 2019-07-02T09:02:30.000-04:00
diff --git a/src/WiFi.cpp b/src/WiFi.cpp
@@ -314,7 +314,7 @@ int WiFiClass::init()
 
 	if (nmdrv_firm_ver >= M2M_MAKE_VERSION(19, 5, 0)) {
 		// enable AES-128 and AES-256 Ciphers, if firmware is 19.5.0 or higher
-		m2m_ssl_set_active_ciphersuites(SSL_NON_ECC_CIPHERS_AES_128 | SSL_NON_ECC_CIPHERS_AES_256);
+		m2m_ssl_set_active_ciphersuites(SSL_CIPHER_RSA_WITH_AES_128_CBC_SHA | SSL_CIPHER_RSA_WITH_AES_128_CBC_SHA256 | SSL_CIPHER_RSA_WITH_AES_128_GCM_SHA256 | SSL_CIPHER_RSA_WITH_AES_256_CBC_SHA | SSL_CIPHER_RSA_WITH_AES_256_CBC_SHA256);
 	}
 
 #ifdef CONF_PERIPH

Original file line number	Diff line number	Diff line change
`@@ -314,7 +314,7 @@ int WiFiClass::init()`
`314`	`314`
`315`	`315`	`if (nmdrv_firm_ver >= M2M_MAKE_VERSION(19, 5, 0)) {`
`316`	`316`	`// enable AES-128 and AES-256 Ciphers, if firmware is 19.5.0 or higher`
`317`		`- m2m_ssl_set_active_ciphersuites(SSL_NON_ECC_CIPHERS_AES_128 \| SSL_NON_ECC_CIPHERS_AES_256);`
	`317`	`+ m2m_ssl_set_active_ciphersuites(SSL_CIPHER_RSA_WITH_AES_128_CBC_SHA \| SSL_CIPHER_RSA_WITH_AES_128_CBC_SHA256 \| SSL_CIPHER_RSA_WITH_AES_128_GCM_SHA256 \| SSL_CIPHER_RSA_WITH_AES_256_CBC_SHA \| SSL_CIPHER_RSA_WITH_AES_256_CBC_SHA256);`
`318`	`318`	`}`
`319`	`319`
`320`	`320`	`#ifdef CONF_PERIPH`