diff options
| author | Alexander Barton <alex@barton.de> | 2014-10-16 13:42:24 +0200 |
|---|---|---|
| committer | Alexander Barton <alex@barton.de> | 2014-10-16 13:42:24 +0200 |
| commit | 100de3e4ccaab10524821d4262f6a8c3342224f8 (patch) | |
| tree | 6dfaed78f970de97d577a9f2e47792ab84a973eb /doc | |
| parent | 7b58538074ad947ab493c45206cec61eae681f7c (diff) | |
| download | ngircd-100de3e4ccaab10524821d4262f6a8c3342224f8.tar.gz ngircd-100de3e4ccaab10524821d4262f6a8c3342224f8.zip | |
Update "CipherList" to not enable SSLv3 by default
Idea, initial patch, and testing by Christoph Biedl <ngircd.anoy@manchmal.in-ulm.de>
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/sample-ngircd.conf.tmpl | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/doc/sample-ngircd.conf.tmpl b/doc/sample-ngircd.conf.tmpl index 1d07822c..b5db1d9e 100644 --- a/doc/sample-ngircd.conf.tmpl +++ b/doc/sample-ngircd.conf.tmpl @@ -259,9 +259,9 @@ # See 'man 1ssl ciphers' (OpenSSL) or 'man 3 gnutls_priority_init' # (GnuTLS) for details. # For OpenSSL: - ;CipherList = HIGH:!aNULL:@STRENGTH + ;CipherList = HIGH:!aNULL:@STRENGTH:!SSLv3 # For GnuTLS: - ;CipherList = SECURE128 + ;CipherList = SECURE128:-VERS-SSL3.0 # Diffie-Hellman parameters ;DHFile = :ETCDIR:/ssl/dhparams.pem |