Do not use TLS_FALLBACK_SCSV

Daniel Gultsch created 7 years ago

closes #2937

Thanks to @tmolitor-stud-tu for explaining the situation in
https://github.com/guardianproject/NetCipher/pull/74

Change summary

src/main/java/eu/siacs/conversations/utils/CryptoHelper.java | 1 +
1 file changed, 1 insertion(+)

Detailed changes

src/main/java/eu/siacs/conversations/utils/CryptoHelper.java

@@ -130,6 +130,7 @@ public final class CryptoHelper {
 		cipherSuites.retainAll(platformCiphers);
 		cipherSuites.addAll(platformCiphers);
 		filterWeakCipherSuites(cipherSuites);
+		cipherSuites.remove("TLS_FALLBACK_SCSV");
 		return cipherSuites.toArray(new String[cipherSuites.size()]);
 	}