aboutsummaryrefslogtreecommitdiffstats
path: root/core/certmanager.lua
diff options
context:
space:
mode:
authorMatthew Wild <mwild1@gmail.com>2013-11-21 02:11:09 +0000
committerMatthew Wild <mwild1@gmail.com>2013-11-21 02:11:09 +0000
commit9609c710c6e3de5415e256737181a924e0ffa9e3 (patch)
tree999fa993e1be4d806f987084f99b913cd6cec6af /core/certmanager.lua
parent1ee55840ff7e4f62487b32a2418b8fc6ebbecc6f (diff)
downloadprosody-9609c710c6e3de5415e256737181a924e0ffa9e3.tar.gz
prosody-9609c710c6e3de5415e256737181a924e0ffa9e3.zip
certmanager: Further cipher string tweaking. Re-enable ciphers required for DSA and ECDH certs/keys.
Diffstat (limited to 'core/certmanager.lua')
-rw-r--r--core/certmanager.lua2
1 files changed, 1 insertions, 1 deletions
diff --git a/core/certmanager.lua b/core/certmanager.lua
index 976b0a88..d6784a96 100644
--- a/core/certmanager.lua
+++ b/core/certmanager.lua
@@ -70,7 +70,7 @@ function create_context(host, mode, user_ssl_config)
options = user_ssl_config.options or default_options;
depth = user_ssl_config.depth;
curve = user_ssl_config.curve or "secp384r1";
- ciphers = user_ssl_config.ciphers or "HIGH+kEDH:HIGH+kEECDH:HIGH+kRSA:!DSS:!3DES:!aNULL";
+ ciphers = user_ssl_config.ciphers or "HIGH+kEDH:HIGH+kEECDH:HIGH:!PSK:!SRP:!3DES:!aNULL";
dhparam = user_ssl_config.dhparam;
};