summary refs log tree commit diff
path: root/doc/sample-ngircd.conf.tmpl
diff options
context:
space:
mode:
authorAlexander Barton <alex@barton.de>2014-10-16 13:42:24 +0200
committerAlexander Barton <alex@barton.de>2014-10-16 13:42:24 +0200
commit100de3e4ccaab10524821d4262f6a8c3342224f8 (patch)
tree6dfaed78f970de97d577a9f2e47792ab84a973eb /doc/sample-ngircd.conf.tmpl
parent7b58538074ad947ab493c45206cec61eae681f7c (diff)
downloadngircd-100de3e4ccaab10524821d4262f6a8c3342224f8.tar.gz
ngircd-100de3e4ccaab10524821d4262f6a8c3342224f8.zip
Update "CipherList" to not enable SSLv3 by default
Idea, initial patch, and testing by Christoph Biedl
<ngircd.anoy@manchmal.in-ulm.de>
Diffstat (limited to 'doc/sample-ngircd.conf.tmpl')
-rw-r--r--doc/sample-ngircd.conf.tmpl4
1 files changed, 2 insertions, 2 deletions
diff --git a/doc/sample-ngircd.conf.tmpl b/doc/sample-ngircd.conf.tmpl
index 1d07822c..b5db1d9e 100644
--- a/doc/sample-ngircd.conf.tmpl
+++ b/doc/sample-ngircd.conf.tmpl
@@ -259,9 +259,9 @@
 	# See 'man 1ssl ciphers' (OpenSSL) or 'man 3 gnutls_priority_init'
 	# (GnuTLS) for details.
 	# For OpenSSL:
-	;CipherList = HIGH:!aNULL:@STRENGTH
+	;CipherList = HIGH:!aNULL:@STRENGTH:!SSLv3
 	# For GnuTLS:
-	;CipherList = SECURE128
+	;CipherList = SECURE128:-VERS-SSL3.0
 
 	# Diffie-Hellman parameters
 	;DHFile = :ETCDIR:/ssl/dhparams.pem