diff options
| author | Federico G. Schwindt <fgsch@lodoss.net> | 2013-09-17 16:16:51 +0100 |
|---|---|---|
| committer | Federico G. Schwindt <fgsch@lodoss.net> | 2013-09-17 17:15:24 +0100 |
| commit | 0985d69cc6c1daa7cdc8f15f93772b12ab3e8271 (patch) | |
| tree | b7089b14f938865b9f5ea4841df38b58e3394d97 /doc | |
| parent | d0977258ee14a5178e98c9a00c064d90f0eac9d6 (diff) | |
| download | ngircd-0985d69cc6c1daa7cdc8f15f93772b12ab3e8271.tar.gz ngircd-0985d69cc6c1daa7cdc8f15f93772b12ab3e8271.zip | |
Change cipher defaults
Switch cipher defaults to HIGH:!aNULL:@STRENGTH (OpenSSL) or SECURE128 (GnuTLS).
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/sample-ngircd.conf.tmpl | 6 |
1 files changed, 2 insertions, 4 deletions
diff --git a/doc/sample-ngircd.conf.tmpl b/doc/sample-ngircd.conf.tmpl index 1bdf01ee..65da3601 100644 --- a/doc/sample-ngircd.conf.tmpl +++ b/doc/sample-ngircd.conf.tmpl @@ -249,11 +249,9 @@ ;CertFile = :ETCDIR:/ssl/server-cert.pem # Select cipher suites allowed for SSL/TLS connections. This defaults - # to the empty string, so all supported ciphers are allowed. Please - # see 'man 1ssl ciphers' (OpenSSL) and 'man 3 gnutls_priority_init' + # to HIGH:!aNULL:@STRENGTH (OpenSSL) or SECURE128 (GnuTLS). + # See 'man 1ssl ciphers' (OpenSSL) or 'man 3 gnutls_priority_init' # (GnuTLS) for details. - # For example, this setting allows only "high strength" cipher suites, - # disables the ones without authentication, and sorts by strength: # For OpenSSL: ;CipherList = HIGH:!aNULL:@STRENGTH # For GnuTLS: |