SSL module should not offer RC4 based cipher suites for clients by default

[alex]

BPO	23481
Nosy	@pitrou, @giampaolo, @tiran, @alex, @sigmavirus24, @dstufft
Files	rc4.diff

^{Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.}

Show more details

GitHub fields:

assignee = None
closed_at = <Date 2015-02-19.22:58:26.293>
created_at = <Date 2015-02-19.00:54:56.421>
labels = ['library']
title = 'SSL module should not offer RC4 based cipher suites for clients by default'
updated_at = <Date 2015-02-19.22:58:26.291>
user = 'https://github.com/alex'

bugs.python.org fields:

activity = <Date 2015-02-19.22:58:26.291>
actor = 'python-dev'
assignee = 'none'
closed = True
closed_date = <Date 2015-02-19.22:58:26.293>
closer = 'python-dev'
components = ['Library (Lib)']
creation = <Date 2015-02-19.00:54:56.421>
creator = 'alex'
dependencies = []
files = ['38176']
hgrepos = []
issue_num = 23481
keywords = ['patch']
message_count = 4.0
messages = ['236202', '236203', '236238', '236240']
nosy_count = 8.0
nosy_names = ['janssen', 'pitrou', 'giampaolo.rodola', 'christian.heimes', 'alex', 'python-dev', 'icordasc', 'dstufft']
pr_nums = []
priority = 'normal'
resolution = 'fixed'
stage = 'resolved'
status = 'closed'
superseder = None
type = None
url = 'https://bugs.python.org/issue23481'
versions = ['Python 2.7', 'Python 3.4', 'Python 3.5']

[alex]

In addition to the security concerns, it is now a violation of RFC7465 to offer a cipher suite with RC4 in a ClientHello: https://tools.ietf.org/html/rfc7465

[sigmavirus24]

It's clearly no longer acceptable to include RC4 when the IETF has felt it necessary to publish an RFC prohibiting its usage.

[pitrou]

Sounds fine to me. Should a test be added?

[python-dev]

New changeset c509e6f18d7d by Benjamin Peterson in branch '3.4':
remove rc4 from the default client ciphers (closes bpo-23481)
https://hg.python.org/cpython/rev/c509e6f18d7d

New changeset 3596081cfb55 by Benjamin Peterson in branch '2.7':
remove rc4 from the default client ciphers (closes bpo-23481)
https://hg.python.org/cpython/rev/3596081cfb55

New changeset 041a27298cf3 by Benjamin Peterson in branch 'default':
merge 3.4 (bpo-23481)
https://hg.python.org/cpython/rev/041a27298cf3