From 948f787196c7433e404ed3e84943cceb829d3edc Mon Sep 17 00:00:00 2001 From: Matthew Wild Date: Sun, 10 Nov 2013 16:43:10 +0000 Subject: util.set: Remove unused variable --- util/set.lua | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/util/set.lua b/util/set.lua index b9e9ef21..fa065a9c 100644 --- a/util/set.lua +++ b/util/set.lua @@ -23,7 +23,7 @@ function set_mt.__sub(set1, set2) return _M.difference(set1, set2); end function set_mt.__div(set, func) - local new_set, new_items = _M.new(); + local new_set = _M.new(); local items, new_items = set._items, new_set._items; for item in pairs(items) do local new_item = func(item); -- cgit v1.2.3 From 07a71ad6aaaa44203609b5a7d22bea3e5bb40a4f Mon Sep 17 00:00:00 2001 From: Matthew Wild Date: Sun, 10 Nov 2013 18:46:48 +0000 Subject: certmanager: Update default cipher string to prefer forward-secrecy over cipher strength and to disable triple-DES (weaker and much slower than AES) --- core/certmanager.lua | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/core/certmanager.lua b/core/certmanager.lua index 0503f40e..1a8da6a6 100644 --- a/core/certmanager.lua +++ b/core/certmanager.lua @@ -70,7 +70,7 @@ function create_context(host, mode, user_ssl_config) options = user_ssl_config.options or default_options; depth = user_ssl_config.depth; curve = user_ssl_config.curve or "secp384r1"; - ciphers = user_ssl_config.ciphers or "HIGH:!DSS:!aNULL@STRENGTH"; + ciphers = user_ssl_config.ciphers or "HIGH+kEDH:HIGH+kEECDH:HIGH+kRSA:!DSS:!3DES:!aNULL"; dhparam = user_ssl_config.dhparam; }; -- cgit v1.2.3