diff --git a/Changelog b/Changelog index a80c815..7769129 100644 --- a/Changelog +++ b/Changelog @@ -1,6 +1,12 @@ Changelog ========= +Version: 1.11.6 +Date : 09/04/2016 +Author : rbsec +Changes: The following are a list of changes + > Re-eanble support for weak (<1024) DH keys in OpenSSL + Version: 1.11.5 Date : 24/03/2016 Author : rbsec diff --git a/Makefile b/Makefile index c7d3849..91f183f 100644 --- a/Makefile +++ b/Makefile @@ -66,8 +66,8 @@ install: exit 1; \ fi ifeq ($(OS), Darwin) - install -d sslscan $(DESTDIR)$(BINDIR)/sslscan; - install -d sslscan.1 $(DESTDIR)$(MAN1DIR)/sslscan.1; + install sslscan $(DESTDIR)$(BINDIR)/sslscan; + install sslscan.1 $(DESTDIR)$(MAN1DIR)/sslscan.1; else install -D sslscan $(DESTDIR)$(BINDIR)/sslscan; install -D sslscan.1 $(DESTDIR)$(MAN1DIR)/sslscan.1; @@ -85,8 +85,15 @@ opensslpull: else \ git clone --depth 1 -b OpenSSL_1_0_2-stable https://github.com/openssl/openssl ./openssl && cd ./openssl && touch ../.openssl.is.fresh ; \ fi + # Re-enable SSLv2 EXPORT ciphers sed -i.bak 's/# if 0/# if 1/g' openssl/ssl/s2_lib.c rm openssl/ssl/s2_lib.c.bak + # Re-enable weak (<1024 bit) DH keys + sed -i.bak 's/dh_size < [0-9]\+/dh_size < 512/g' openssl/ssl/s3_clnt.c + rm openssl/ssl/s3_clnt.c.bak + # Break the weak DH key test so OpenSSL compiles + sed -i.bak 's/dhe512/zzz/g' openssl/test/testssl + rm openssl/test/testssl.bak # Need to build OpenSSL differently on OSX ifeq ($(OS), Darwin)