{"action":"created","issue":{"url":"https://api.github.com/repos/owncloud/android/issues/838","labels_url":"https://api.github.com/repos/owncloud/android/issues/838/labels{/name}","comments_url":"https://api.github.com/repos/owncloud/android/issues/838/comments","events_url":"https://api.github.com/repos/owncloud/android/issues/838/events","html_url":"https://github.com/owncloud/android/issues/838","id":54478917,"number":838,"title":"Update OpenSSL to provide EC-based ciphers","user":{"login":"leonardomarino","id":7528337,"avatar_url":"https://avatars.githubusercontent.com/u/7528337?v=3","gravatar_id":"","url":"https://api.github.com/users/leonardomarino","html_url":"https://github.com/leonardomarino","followers_url":"https://api.github.com/users/leonardomarino/followers","following_url":"https://api.github.com/users/leonardomarino/following{/other_user}","gists_url":"https://api.github.com/users/leonardomarino/gists{/gist_id}","starred_url":"https://api.github.com/users/leonardomarino/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/leonardomarino/subscriptions","organizations_url":"https://api.github.com/users/leonardomarino/orgs","repos_url":"https://api.github.com/users/leonardomarino/repos","events_url":"https://api.github.com/users/leonardomarino/events{/privacy}","received_events_url":"https://api.github.com/users/leonardomarino/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/owncloud/android/labels/encryption","name":"encryption","color":"009800"},{"url":"https://api.github.com/repos/owncloud/android/labels/enhancement","name":"enhancement","color":"84b6eb"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-01-15T17:30:24Z","updated_at":"2015-03-17T14:28:40Z","closed_at":null,"body":"Hi, I am using the ownCloud Android App version 1.6.2 and I would like to know if you could include support for EC-based ciphers, I am particularly interested in stop supporting SHA1. See closed issue for mirall (https://github.com/owncloud/client/issues/764) implemented in 1.7.1.\r\n\r\nI am running apache and I have the following directives:\r\n\r\nSSLProtocol All -SSLv2 -SSLv3\r\nSSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES+SHA384:ECDH+AES+SHA256:DH+AES:!RSA+AES256:!ADH:!AECDH:!MD5:!DSS:!aNULL:!eNULL:!LOW:!EXP\r\nSSLHonorCipherOrder on\r\n\r\nThese directives allow you to use cyphers that support forward secrecy and work with a wide range of clients. In my apache log using Android-ownCloud 1.6.2 I get:\r\n\r\n[15/Jan/2015:12:18:46 -0500] 192.168.1.16 - TLSv1.2 DHE-RSA-AES256-SHA\r\n\r\nHowever, I would like to avoid using SHA1, and when I include the following directive in the SSLCipherSuite :!SHA1 the Android-ownCloud stops working.\r\n\r\nThis is a paid app and the new ciphers have been implemented in the Windows and Mac clients for sure. I would greatly appreciate it if you could update the Android-ownCloud as well.\r\n"},"comment":{"url":"https://api.github.com/repos/owncloud/android/issues/comments/82383037","html_url":"https://github.com/owncloud/android/issues/838#issuecomment-82383037","issue_url":"https://api.github.com/repos/owncloud/android/issues/838","id":82383037,"user":{"login":"masensio","id":3862330,"avatar_url":"https://avatars.githubusercontent.com/u/3862330?v=3","gravatar_id":"","url":"https://api.github.com/users/masensio","html_url":"https://github.com/masensio","followers_url":"https://api.github.com/users/masensio/followers","following_url":"https://api.github.com/users/masensio/following{/other_user}","gists_url":"https://api.github.com/users/masensio/gists{/gist_id}","starred_url":"https://api.github.com/users/masensio/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/masensio/subscriptions","organizations_url":"https://api.github.com/users/masensio/orgs","repos_url":"https://api.github.com/users/masensio/repos","events_url":"https://api.github.com/users/masensio/events{/privacy}","received_events_url":"https://api.github.com/users/masensio/received_events","type":"User","site_admin":false},"created_at":"2015-03-17T14:28:40Z","updated_at":"2015-03-17T14:28:40Z","body":"Hi @leonardomarino,\r\n\r\nCurrently, we are using the SSL provided by the device. Our app ask for all available ciphers on the device, instead of implement its own ciphers. \r\nSo, maybe your Android device doesn't support this cipher. \r\n\r\nSorry if it isn't a good news for you. :worried: "}}