{"action":"created","issue":{"url":"https://api.github.com/repos/google/conscrypt/issues/498","repository_url":"https://api.github.com/repos/google/conscrypt","labels_url":"https://api.github.com/repos/google/conscrypt/issues/498/labels{/name}","comments_url":"https://api.github.com/repos/google/conscrypt/issues/498/comments","events_url":"https://api.github.com/repos/google/conscrypt/issues/498/events","html_url":"https://github.com/google/conscrypt/issues/498","id":327908549,"node_id":"MDU6SXNzdWUzMjc5MDg1NDk=","number":498,"title":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 Missing in 1.1.2","user":{"login":"cakofony","id":3854321,"node_id":"MDQ6VXNlcjM4NTQzMjE=","avatar_url":"https://avatars1.githubusercontent.com/u/3854321?v=4","gravatar_id":"","url":"https://api.github.com/users/cakofony","html_url":"https://github.com/cakofony","followers_url":"https://api.github.com/users/cakofony/followers","following_url":"https://api.github.com/users/cakofony/following{/other_user}","gists_url":"https://api.github.com/users/cakofony/gists{/gist_id}","starred_url":"https://api.github.com/users/cakofony/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cakofony/subscriptions","organizations_url":"https://api.github.com/users/cakofony/orgs","repos_url":"https://api.github.com/users/cakofony/repos","events_url":"https://api.github.com/users/cakofony/events{/privacy}","received_events_url":"https://api.github.com/users/cakofony/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-05-30T21:37:25Z","updated_at":"2018-05-30T21:55:14Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"1.1.2 is missing both of the following ciphers which work as expected in 1.1.1:\r\n\r\n* `TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256`\r\n* `TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384`"},"comment":{"url":"https://api.github.com/repos/google/conscrypt/issues/comments/393332572","html_url":"https://github.com/google/conscrypt/issues/498#issuecomment-393332572","issue_url":"https://api.github.com/repos/google/conscrypt/issues/498","id":393332572,"node_id":"MDEyOklzc3VlQ29tbWVudDM5MzMzMjU3Mg==","user":{"login":"davidben","id":109690,"node_id":"MDQ6VXNlcjEwOTY5MA==","avatar_url":"https://avatars0.githubusercontent.com/u/109690?v=4","gravatar_id":"","url":"https://api.github.com/users/davidben","html_url":"https://github.com/davidben","followers_url":"https://api.github.com/users/davidben/followers","following_url":"https://api.github.com/users/davidben/following{/other_user}","gists_url":"https://api.github.com/users/davidben/gists{/gist_id}","starred_url":"https://api.github.com/users/davidben/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/davidben/subscriptions","organizations_url":"https://api.github.com/users/davidben/orgs","repos_url":"https://api.github.com/users/davidben/repos","events_url":"https://api.github.com/users/davidben/events{/privacy}","received_events_url":"https://api.github.com/users/davidben/received_events","type":"User","site_admin":false},"created_at":"2018-05-30T21:55:14Z","updated_at":"2018-05-30T21:55:14Z","author_association":"CONTRIBUTOR","body":"These were intentional removals from BoringSSL. The SHA-2 CBC ciphers don't really serve any purpose in life. They, like the SHA-1 CBC ciphers, got the encryption and MAC order wrong and are thus still vulnerable to the Lucky 13 attack. They also don't exist until TLS 1.2, at which point the AEAD-based ciphers are available.\r\n\r\nYou should instead be using TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 or TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384."}}
{"actor":{"display_login":"davidben"}}