From owner-freebsd-security@FreeBSD.ORG Mon Jul 9 02:22:45 2012 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id EC8811065672 for ; Mon, 9 Jul 2012 02:22:45 +0000 (UTC) (envelope-from dewayne.geraghty@heuristicsystems.com.au) Received: from nskntqsrv02p.mx.bigpond.com (nskntqsrv02p.mx.bigpond.com [61.9.168.234]) by mx1.freebsd.org (Postfix) with ESMTP id 740EC8FC14 for ; Mon, 9 Jul 2012 02:22:45 +0000 (UTC) Received: from nskntcmgw09p ([61.9.169.169]) by nskntmtas06p.mx.bigpond.com with ESMTP id <20120708232911.BDFG10884.nskntmtas06p.mx.bigpond.com@nskntcmgw09p> for ; Sun, 8 Jul 2012 23:29:11 +0000 Received: from hermes.heuristicsystems.com.au ([58.172.112.105]) by nskntcmgw09p with BigPond Outbound id XzVA1j0062GVmci01zVAec; Sun, 08 Jul 2012 23:29:11 +0000 X-Authority-Analysis: v=2.0 cv=Lam+G0ji c=1 sm=1 a=0GO/22z+lHYfckWJ4naYnw==:17 a=yMcmsga8Mt0A:10 a=twTT4oUKOlYA:10 a=kj9zAlcOel0A:10 a=GHIR_BbyAAAA:8 a=W1k-08ina11HTN3IWz0A:9 a=CjuIK1q_8ugA:10 a=0GO/22z+lHYfckWJ4naYnw==:117 Received: from white (white.hs [10.0.5.2]) (authenticated bits=0) by hermes.heuristicsystems.com.au (8.14.5/8.13.6) with ESMTP id q68NPgcw090451 (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NOT); Mon, 9 Jul 2012 09:25:46 +1000 (EST) (envelope-from dewayne.geraghty@heuristicsystems.com.au) From: "Dewayne Geraghty" To: "'Michael Holmes'" References: Date: Mon, 9 Jul 2012 09:25:43 +1000 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook 11 In-Reply-To: X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.6157 Thread-Index: Ac1cu8/ijJNp2O0WR/yTdb1SKtBGwgApFN5g X-Mailman-Approved-At: Mon, 09 Jul 2012 02:34:39 +0000 Cc: 'freebsd-security' Subject: RE: OpenSSL on 9.0-RELEASE-p3 using Camellia as default TLS cipher? X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Jul 2012 02:22:46 -0000 Michael, I think you'll find that the cipher selection is based on negotiation between the client & server. Perhaps if you examine the config files, or ascertain the defaults of the applications being used, you'll be able to pin-point the reason for the selection. Regards, Dewayne.