mirror of
https://github.com/matrix-construct/construct
synced 2024-11-02 20:09:16 +01:00
openssl: Use cipher list suggested by Argure.
This commit is contained in:
parent
cee842a829
commit
9799bea4a1
1 changed files with 1 additions and 0 deletions
|
@ -316,6 +316,7 @@ rb_init_ssl(void)
|
||||||
SSL_CTX_set_verify(ssl_server_ctx, SSL_VERIFY_PEER | SSL_VERIFY_CLIENT_ONCE, verify_accept_all_cb);
|
SSL_CTX_set_verify(ssl_server_ctx, SSL_VERIFY_PEER | SSL_VERIFY_CLIENT_ONCE, verify_accept_all_cb);
|
||||||
SSL_CTX_set_session_id_context(ssl_server_ctx,
|
SSL_CTX_set_session_id_context(ssl_server_ctx,
|
||||||
(const unsigned char *)"libratbox", 9);
|
(const unsigned char *)"libratbox", 9);
|
||||||
|
SSL_CTX_set_cipher_list(ssl_server_ctx, "EECDH+HIGH:EDH+HIGH:HIGH:!aNULL");
|
||||||
|
|
||||||
/* Set ECDHE on OpenSSL 1.00+, but make sure it's actually available because redhat are dicks
|
/* Set ECDHE on OpenSSL 1.00+, but make sure it's actually available because redhat are dicks
|
||||||
and bastardise their OpenSSL for stupid reasons... */
|
and bastardise their OpenSSL for stupid reasons... */
|
||||||
|
|
Loading…
Reference in a new issue