omit weak ciphers to prevent hackage

This commit is contained in:
Anthony Minessale 2013-03-04 15:16:18 -06:00
parent de6389dd4f
commit cc3e75fc62
3 changed files with 5 additions and 1 deletions

View File

@ -1 +1 @@
Wed Mar 6 12:57:17 CST 2013
Wed Mar 6 13:01:54 CST 2013

View File

@ -388,6 +388,8 @@ static int tport_ws_init_primary_secure(tport_primary_t *pri,
goto done;
}
SSL_CTX_set_cipher_list(wspri->ssl_ctx, "HIGH:!DSS:!aNULL@STRENGTH");
ret = tport_ws_init_primary(pri, tpn, ai, tags, return_culprit);
done:

View File

@ -91,6 +91,8 @@ void init_ssl(void) {
abort();
}
SSL_CTX_set_cipher_list(globals.ssl_ctx, "HIGH:!DSS:!aNULL@STRENGTH");
thread_setup();
}