commit 3b09a1571c67f53dc81533c81f99cfadfd550d26 Author: Runa A. Sandvik runa.sandvik@gmail.com Date: Mon Jun 18 20:24:35 2012 +0100

add a note about two patches that worked in kazakhstan --- patches/kazakhstan/notes.txt | 8 ++++++++ 1 files changed, 8 insertions(+), 0 deletions(-)

diff --git a/patches/kazakhstan/notes.txt b/patches/kazakhstan/notes.txt new file mode 100644 index 0000000..0aa68ac --- /dev/null +++ b/patches/kazakhstan/notes.txt @@ -0,0 +1,8 @@ +As described in #6045, we found that changing the cipher suite (from the +default TLS1_TXT_DHE_RSA_WITH_AES_256_SHA (0x0039)) bypasses the +censorship in Kazakhstan. The patch ethiopia/remove_0x0039.patch removes +0x0039 from SERVER_CIPHER_LIST. + +The patch ethiopia/finalhello_skip.patch causes the final hello done TLS +record to be sent in a separate packet. This also bypasses the +censorship in Kazakhstan.