blob: 1cb4bd1b8e2bb42f91a4ea48a4b8c02783cea1b1 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
|
From f056a86227675d6f653036de56e79b4b7f37db32 Mon Sep 17 00:00:00 2001
From: Sergey Avseyev <sergey.avseyev@gmail.com>
Date: Fri, 1 Nov 2019 17:33:22 +0300
Subject: [PATCH] Enforce system crypto policies
Change-Id: I89ac30526455ce7e51a584daa354001b3f3dd7a9
---
src/ssl/ssl_common.c | 6 +-----
1 file changed, 1 insertion(+), 5 deletions(-)
diff --git a/src/ssl/ssl_common.c b/src/ssl/ssl_common.c
index c223114f..95170d33 100644
--- a/src/ssl/ssl_common.c
+++ b/src/ssl/ssl_common.c
@@ -287,11 +287,7 @@ lcbio_pSSLCTX lcbio_ssl_new(const char *tsfile, const char *cafile, const char *
lcb_error_t err_s;
lcbio_pSSLCTX ret;
- static const char *default_ssl_cipher_list =
- "DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DES-CBC3-SHA:DES-"
- "CBC3-MD5:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:AES128-SHA:DHE-RSA-SEED-SHA:DHE-DSS-SEED-SHA:SEED-SHA:RC2-CBC-"
- "MD5:RC4-SHA:RC4-MD5:RC4-MD5:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:DES-CBC-MD5:EXP-EDH-RSA-DES-"
- "CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC2-CBC-MD5:EXP-RC4-MD5:EXP-RC4-MD5";
+ static const char *default_ssl_cipher_list = "PROFILE=SYSTEM";
const char* cipher_list = getenv("LCB_SSL_CIPHER_LIST");
#if HAVE_CIPERSUITES
--
2.21.0
|
