85720 - Missing pref checkbox for SSL3 domestic DES ciphersuite

Status: VERIFIED FIXED

(Core Graveyard :: Security: UI, defect, P1)

Description

[Terry Hayes]

The pref window for setting SSL/TLS ciphersuites is missing a checkbox for the
domestic strength DES 56-bit cipher.  It looks like this means that this cipher
is not being managed and the setting depends on the setting of the previous
value in the prefs listener table (which is the FIPS version of this cipher).

As a result, it is impossible to set the ciphers to FIPS ciphers only, since the
domestic DES cipher will be on as well.

This bug will cover adding this pref to the UI.  We might want to look at the
way the pref settings are transferred to SSL settings and handle the case where
no pref value is available.

Comment 1

[Terry Hayes]

Attachment: patch to add pref checkbox and default pref value

Comment 2

[Stephane Saux]

target -> 2.0

Comment 3

[Stephane Saux]

Mass reassigning target to 2.1

Comment 4

[Stephane Saux]

r=ssaux for PSM

Comment 5

[Stephane Saux]

Fix available
->P1

Comment 6

[Stephane Saux]

adding patch keyword.

Comment 7

[John Unruh]

Mass assigning QA to ckritzer.

Comment 8

[Christopher Blizzard (:blizzard)]

sr=blizzard

Comment 9

[David P. Drinan]

Fix checked in.

Comment 10

[John Unruh]

Verified on 8/3 WinNT trunk. After turning of the pref, prefs.js contains:
user_pref("security.ssl3.rsa_des_sha", false);