Browse Source

NSA makes me paranoid ... try to get best supported cipher of the used browser and don't use RC4 at all

v0.1.8
Georg Hopp 12 years ago
parent
commit
ac0d6e79c6
  1. 4
      src/server/server.c

4
src/server/server.c

@ -75,8 +75,12 @@ serverCtor(void * _this, va_list * params)
socketNonblock(this->sockSSL);
SSL_library_init();
OpenSSL_add_all_algorithms();
SSL_load_error_strings();
this->ctx = SSL_CTX_new(SSLv23_server_method());
SSL_CTX_set_cipher_list(
this->ctx,
"ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AES:RSA+3DES:!ADH:!AECDH:!MD5:!DSS");
SSL_CTX_use_certificate_file(
this->ctx,
CONFIGDIR "/taskrambler.crt",

Loading…
Cancel
Save