Merge lp:~sergiodj/midori/safe-ciphers into lp:midori

[Sergio Durigan Junior]

Improve security by making sure that we use a safe set of ciphers.

This comes from Debian bug #804196 (LP Bug #1517265). When Midori
uses libwebkitgtk, it inherits the default value of the
G_TLS_GNUTLS_PRIORITY environment variable. Unfortunately this value
is not safe enough because it still lets GnuTLS to enable to unsafe
ciphers. Therefore, we need to set this variable ourselves and make
sure that Midori is using safe ciphers for TLS operations.

Improve security by making sure that we use a safe set of ciphers.

This comes from Debian bug #804196 (LP Bug #1517265). When Midori
uses libwebkitgtk, it inherits the default value of the
G_TLS_GNUTLS_PRIORITY environment variable. Unfortunately this value
is not safe enough because it still lets GnuTLS to enable to unsafe
ciphers. Therefore, we need to set this variable ourselves and make
sure that Midori is using safe ciphers for TLS operations.

Unmerged revisions

7058. By Sergio Durigan Junior on 2015-11-18

Improve security by making sure that we use a safe set of ciphers.

This comes from Debian bug #804196 (LP Bug #1517265). When Midori
uses libwebkitgtk, it inherits the default value of the
G_TLS_GNUTLS_PRIORITY environment variable. Unfortunately this value
is not safe enough because it still lets GnuTLS to enable to unsafe
ciphers. Therefore, we need to set this variable ourselves and make
sure that Midori is using safe ciphers for TLS operations.

=== modified file 'midori/main.c'
--- midori/main.c	2014-04-23 03:34:23 +0000
+++ midori/main.c	2015-11-18 21:32:32 +0000
@@ -143,6 +143,11 @@
     /* Versioned prgname to override menuproxy blacklist */
     g_set_prgname (PACKAGE_NAME "4");
 
+    /* Make sure we are using a sane set of ciphers.  */
+    g_setenv ("G_TLS_GNUTLS_PRIORITY",
+	      "NORMAL:%COMPAT:%LATEST_RECORD_VERSION:!VERS-SSL3.0:!ARCFOUR-128",
+	      1);
+
     if (version)
     {
         GString* versions = g_string_new ("");