{"action":"created","issue":{"url":"https://api.github.com/repos/dotnet/corefx/issues/21577","repository_url":"https://api.github.com/repos/dotnet/corefx","labels_url":"https://api.github.com/repos/dotnet/corefx/issues/21577/labels{/name}","comments_url":"https://api.github.com/repos/dotnet/corefx/issues/21577/comments","events_url":"https://api.github.com/repos/dotnet/corefx/issues/21577/events","html_url":"https://github.com/dotnet/corefx/issues/21577","id":238650495,"number":21577,"title":"Allow changing cipher suites offered in SSL/TLS handshake","user":{"login":"mattzink","id":2976921,"avatar_url":"https://avatars2.githubusercontent.com/u/2976921?v=4","gravatar_id":"","url":"https://api.github.com/users/mattzink","html_url":"https://github.com/mattzink","followers_url":"https://api.github.com/users/mattzink/followers","following_url":"https://api.github.com/users/mattzink/following{/other_user}","gists_url":"https://api.github.com/users/mattzink/gists{/gist_id}","starred_url":"https://api.github.com/users/mattzink/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mattzink/subscriptions","organizations_url":"https://api.github.com/users/mattzink/orgs","repos_url":"https://api.github.com/users/mattzink/repos","events_url":"https://api.github.com/users/mattzink/events{/privacy}","received_events_url":"https://api.github.com/users/mattzink/received_events","type":"User","site_admin":false},"labels":[{"id":497898777,"url":"https://api.github.com/repos/dotnet/corefx/labels/area-System.Net.Security","name":"area-System.Net.Security","color":"d4c5f9","default":false},{"id":205613977,"url":"https://api.github.com/repos/dotnet/corefx/labels/os-linux","name":"os-linux","color":"fef2c0","default":false},{"id":205613895,"url":"https://api.github.com/repos/dotnet/corefx/labels/os-mac-os-x","name":"os-mac-os-x","color":"fef2c0","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":13,"created_at":"2017-06-26T19:51:22Z","updated_at":"2017-10-11T22:54:22Z","closed_at":null,"author_association":"NONE","body":"Re-opening a previously closed issue (https://github.com/dotnet/corefx/issues/15157) with a supporting use case.\r\n\r\nFor US government compliance (FIPS, CNSA, etc), the set of allowed ciphers over TLS is mandated. There does not seem to be any mechanism for .NET Core on Linux to adjust the cipher suite offered when using HttpClient and friends, and therefore .NET Core cannot currently be used in most government installations. This is a key blocker to adoption for us."},"comment":{"url":"https://api.github.com/repos/dotnet/corefx/issues/comments/335971727","html_url":"https://github.com/dotnet/corefx/issues/21577#issuecomment-335971727","issue_url":"https://api.github.com/repos/dotnet/corefx/issues/21577","id":335971727,"user":{"login":"mattzink","id":2976921,"avatar_url":"https://avatars2.githubusercontent.com/u/2976921?v=4","gravatar_id":"","url":"https://api.github.com/users/mattzink","html_url":"https://github.com/mattzink","followers_url":"https://api.github.com/users/mattzink/followers","following_url":"https://api.github.com/users/mattzink/following{/other_user}","gists_url":"https://api.github.com/users/mattzink/gists{/gist_id}","starred_url":"https://api.github.com/users/mattzink/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mattzink/subscriptions","organizations_url":"https://api.github.com/users/mattzink/orgs","repos_url":"https://api.github.com/users/mattzink/repos","events_url":"https://api.github.com/users/mattzink/events{/privacy}","received_events_url":"https://api.github.com/users/mattzink/received_events","type":"User","site_admin":false},"created_at":"2017-10-11T22:54:22Z","updated_at":"2017-10-11T22:54:22Z","author_association":"NONE","body":"As long as users are able to construct their own CipherSuite instances, and are not just limited to the pre-canned ones, then I think something along the lines of Peter's proposal would meet our specific needs.\r\n\r\nAnother tricky aspect will be defining the set of cross-platform (SChannel, OpenSSL, etc) cipher types (I think `CipherAlgorithmType` in the proposal), and again supporting custom user provided instances (for custom OpenSSL builds with new ciphers, etc)"}}
{"actor":{"display_login":"mattzink"}}