From 65931067bf8d24dc78885fabeed2297864ccebde Mon Sep 17 00:00:00 2001 From: Kim Alvefur Date: Tue, 15 Oct 2013 01:37:16 +0200 Subject: certmanager: Add back single_dh_use and single_ecdh_use to default options (Zash breaks, Zash unbreaks) --- core/certmanager.lua | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) (limited to 'core/certmanager.lua') diff --git a/core/certmanager.lua b/core/certmanager.lua index caa4afce..0709c650 100644 --- a/core/certmanager.lua +++ b/core/certmanager.lua @@ -53,8 +53,12 @@ if ssl and not luasec_has_verifyext and ssl.x509 then end end -if luasec_has_no_compression and configmanager.get("*", "ssl_compression") ~= true then - core_defaults.options[#core_defaults.options+1] = "no_compression"; +if luasec_has_no_compression then -- Has no_compression? Then it has these too... + default_options[#default_options+1] = "single_dh_use"; + default_options[#default_options+1] = "single_ecdh_use"; + if configmanager.get("*", "ssl_compression") ~= true then + core_defaults.options[#core_defaults.options+1] = "no_compression"; + end end function create_context(host, mode, user_ssl_config) -- cgit v1.2.3