Public/elog
1
0
Fork 0
mirror of https://gitea.psi.ch/ELOG/elog.git synced 2026-09-08 17:13:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

Disabled TLSv1 and TLSv1_1

Browse Source
This commit is contained in:
ritt 2021-01-07 22:54:11 +01:00
parent 98097f0344
commit b5b69ac972
1 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
src/elogd.c
View File

@ -29523,6 +29523,17 @@ SSL_CTX *init_ssl(void) {
#endif #endif
ctx = SSL_CTX_new(meth); ctx = SSL_CTX_new(meth);
#if OPENSSL_VERSION_NUMBER > 0x1010000fL
// disable obsolete SSL and TLS, need TLSv1_2 for Internet Explorer
SSL_CTX_set_options(ctx, SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3 |
SSL_OP_NO_TLSv1 | SSL_OP_NO_TLSv1_1);
if (SSL_CTX_set_cipher_list(ctx, "ALL:!NULL-MD5:!NULL-SHA:!NULL-RSA") <= 0) {
eprintf("Error setting the cipher list.\n");
return NULL;
}
#endif
if (getcfg("global", "SSL Passphrase", pwd, sizeof(pwd))) { if (getcfg("global", "SSL Passphrase", pwd, sizeof(pwd))) {
SSL_CTX_set_default_passwd_cb_userdata(ctx, pwd); SSL_CTX_set_default_passwd_cb_userdata(ctx, pwd);
} }