[glib-openssl/wip/onlytlsv12: 2/2] Sort cyphers by strength



commit d7901dd25b3a35e66c13a96d6b2b66371fd9beb2
Author: Paolo Borelli <pborelli gnome org>
Date:   Tue Oct 3 18:01:04 2017 +0200

    Sort cyphers by strength
    
    Also remove DES

 tls/openssl/gtlsserverconnection-openssl.c |    3 ++-
 1 files changed, 2 insertions(+), 1 deletions(-)
---
diff --git a/tls/openssl/gtlsserverconnection-openssl.c b/tls/openssl/gtlsserverconnection-openssl.c
index b0a778f..a7caf4d 100644
--- a/tls/openssl/gtlsserverconnection-openssl.c
+++ b/tls/openssl/gtlsserverconnection-openssl.c
@@ -64,7 +64,8 @@ static const gchar DEFAULT_CIPHER_LIST[] =
   "DHE-RSA-AES128-SHA256:"
   "DHE-RSA-AES256-SHA:"
   "DHE-RSA-AES256-SHA256:"
-  "DES-CBC3-SHA";
+  "@STRENGTH" /* Sort by strength */
+;
 
 static void g_tls_server_connection_openssl_initable_interface_init (GInitableIface  *iface);
 


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]