Would love to see the reasoning for the fix in OpenSSL. Somebody in the future might want to use a deprecated, weak cipher - but wants to avoid using a bad key.

Would love to see the reasoning for the fix in OpenSSL. Somebody in the future might want to use a deprecated, weak cipher - but wants to avoid using a bad key. Makes sense...