Sync ciphers against stock firefox

2 files changed, 5 insertions, 2 deletions

diff --git a/PKGBUILD b/PKGBUILD
index fa0a4a4..4f47af0 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -5,7 +5,7 @@
 
 _pkgname=palemoon
 pkgname=${_pkgname}-preferences
-pkgver=20200326
+pkgver=20200425
 pkgrel=1
 pkgdesc="Vendor.js for PaleMoon"
 arch=(any)
@@ -15,7 +15,7 @@ depends=()
 makedepends=()
 conflicts=(palemoon-preferences-basic)
 source=(vendor.js)
-b2sums=('b8b18de002f66e90de620abad8c5a9fb8ab2cb34e54715727367e7a34fedd31428e43768962d13deff496343837b886d8c7b27f5f3348244497f5d40c5631f35')
+b2sums=('04dc63d1d2feeede5b9dda60ce8e6a97d5d417b6008771893e98d88465cc1a55af21ee830bbc023e8afd78a87d3dc4188521f966d7d3b6c23865d4b5f1677538')
 
 package() {
   install -Dm644 "$srcdir/vendor.js" "$pkgdir/usr/lib/$_pkgname/browser/defaults/preferences/vendor.js"
diff --git a/vendor.js b/vendor.js
index b4b15d0..c586082 100644
--- a/vendor.js
+++ b/vendor.js
@@ -336,7 +336,10 @@ pref("security.ssl.enable_ocsp_stapling", true);
 pref("security.ssl.require_safe_negotiation", true);  //Conflict
 //pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
 pref("security.ssl.treat_unsafe_negotiation_as_broken", true);  //Conflict
+pref("security.ssl3.security.ssl3.dhe_rsa_aes_128_sha", true);
+pref("security.ssl3.security.ssl3.dhe_rsa_aes_256_sha", true);
 pref("security.ssl3.rsa_aes_256_gcm_sha384", false);
+pref("security.ssl3.rsa_aes_256_sha256", false);
 pref("security.ssl3.dhe_rsa_camellia_128_sha", false);
 pref("security.ssl3.dhe_rsa_camellia_256_sha", false);
 pref("security.ssl3.rsa_camellia_128_sha", false);