summary refs log tree commit diff
path: root/src
diff options
context:
space:
mode:
authorAlexander Barton <alex@barton.de>2014-10-16 13:42:24 +0200
committerAlexander Barton <alex@barton.de>2014-10-16 13:42:24 +0200
commit100de3e4ccaab10524821d4262f6a8c3342224f8 (patch)
tree6dfaed78f970de97d577a9f2e47792ab84a973eb /src
parent7b58538074ad947ab493c45206cec61eae681f7c (diff)
downloadngircd-100de3e4ccaab10524821d4262f6a8c3342224f8.tar.gz
ngircd-100de3e4ccaab10524821d4262f6a8c3342224f8.zip
Update "CipherList" to not enable SSLv3 by default
Idea, initial patch, and testing by Christoph Biedl
<ngircd.anoy@manchmal.in-ulm.de>
Diffstat (limited to 'src')
-rw-r--r--src/ngircd/conf.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/src/ngircd/conf.c b/src/ngircd/conf.c
index 6692ecbb..5f8c3929 100644
--- a/src/ngircd/conf.c
+++ b/src/ngircd/conf.c
@@ -88,10 +88,10 @@ static void Init_Server_Struct PARAMS(( CONF_SERVER *Server ));
 #endif
 
 #ifdef HAVE_LIBSSL
-#define DEFAULT_CIPHERS		"HIGH:!aNULL:@STRENGTH"
+#define DEFAULT_CIPHERS		"HIGH:!aNULL:@STRENGTH:!SSLv3"
 #endif
 #ifdef HAVE_LIBGNUTLS
-#define DEFAULT_CIPHERS		"SECURE128"
+#define DEFAULT_CIPHERS		"SECURE128:-VERS-SSL3.0"
 #endif
 
 #ifdef SSL_SUPPORT