[glib-openssl: 7/7] server: set more options



commit 900b282507a103564320dbdc9e1fe725c524b289
Author: Ignacio Casal Quinteiro <qignacio amazon com>
Date:   Thu Oct 26 09:01:54 2017 +0200

    server: set more options

 tls/openssl/gtlsserverconnection-openssl.c |    2 ++
 1 files changed, 2 insertions(+), 0 deletions(-)
---
diff --git a/tls/openssl/gtlsserverconnection-openssl.c b/tls/openssl/gtlsserverconnection-openssl.c
index bca9413..88229ca 100644
--- a/tls/openssl/gtlsserverconnection-openssl.c
+++ b/tls/openssl/gtlsserverconnection-openssl.c
@@ -262,6 +262,8 @@ g_tls_server_connection_openssl_initable_init (GInitable       *initable,
   /* Only TLS 1.2 or higher */
   options = SSL_OP_NO_TICKET |
             SSL_OP_CIPHER_SERVER_PREFERENCE |
+            SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION |
+            SSL_OP_SINGLE_ECDH_USE |
             SSL_OP_NO_SSLv2 |
             SSL_OP_NO_SSLv3 |
             SSL_OP_NO_TLSv1 |


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]