mirrors/ngircd
1
0
Fork 0
mirror of https://github.com/osmarks/ngircd.git synced 2025-01-22 13:26:52 +00:00
Code Issues Releases Wiki Activity

Update "CipherList" to not enable SSLv3 by default

Browse Source 
Idea, initial patch, and testing by Christoph Biedl
<ngircd.anoy@manchmal.in-ulm.de>
This commit is contained in:
Alexander Barton 2014-10-16 13:42:24 +02:00
parent 7b58538074
commit 100de3e4cc
3 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
doc/sample-ngircd.conf.tmpl
View File

@ -259,9 +259,9 @@
# See 'man 1ssl ciphers' (OpenSSL) or 'man 3 gnutls_priority_init' # See 'man 1ssl ciphers' (OpenSSL) or 'man 3 gnutls_priority_init'
# (GnuTLS) for details. # (GnuTLS) for details.
# For OpenSSL: # For OpenSSL:
;CipherList = HIGH:!aNULL:@STRENGTH ;CipherList = HIGH:!aNULL:@STRENGTH:!SSLv3
# For GnuTLS: # For GnuTLS:
;CipherList = SECURE128 ;CipherList = SECURE128:-VERS-SSL3.0
# Diffie-Hellman parameters # Diffie-Hellman parameters
;DHFile = :ETCDIR:/ssl/dhparams.pem ;DHFile = :ETCDIR:/ssl/dhparams.pem

4
man/ngircd.conf.5.tmpl
View File

@ -1,7 +1,7 @@
.\" .\"
.\" ngircd.conf(5) manual page template .\" ngircd.conf(5) manual page template
.\" .\"
.TH ngircd.conf 5 "Jan 2014" ngIRCd "ngIRCd Manual" .TH ngircd.conf 5 "Oct 2014" ngIRCd "ngIRCd Manual"
.SH NAME .SH NAME
ngircd.conf \- configuration file of ngIRCd ngircd.conf \- configuration file of ngIRCd
.SH SYNOPSIS .SH SYNOPSIS
@ -375,7 +375,7 @@ SSL Certificate file of the private server key.
.TP .TP
\fBCipherList\fR (string) \fBCipherList\fR (string)
Select cipher suites allowed for SSL/TLS connections. This defaults to Select cipher suites allowed for SSL/TLS connections. This defaults to
"HIGH:!aNULL:@STRENGTH" (OpenSSL) or "SECURE128" (GnuTLS). "HIGH:!aNULL:@STRENGTH:!SSLv3" (OpenSSL) or "SECURE128:-VERS-SSL3.0" (GnuTLS).
Please see 'man 1ssl ciphers' (OpenSSL) and 'man 3 gnutls_priority_init' Please see 'man 1ssl ciphers' (OpenSSL) and 'man 3 gnutls_priority_init'
(GnuTLS) for details. (GnuTLS) for details.
.TP .TP

4
src/ngircd/conf.c
View File

@ -88,10 +88,10 @@ static void Init_Server_Struct PARAMS(( CONF_SERVER *Server ));
#endif #endif
#ifdef HAVE_LIBSSL #ifdef HAVE_LIBSSL
#define DEFAULT_CIPHERS "HIGH:!aNULL:@STRENGTH" #define DEFAULT_CIPHERS "HIGH:!aNULL:@STRENGTH:!SSLv3"
#endif #endif
#ifdef HAVE_LIBGNUTLS #ifdef HAVE_LIBGNUTLS
#define DEFAULT_CIPHERS "SECURE128" #define DEFAULT_CIPHERS "SECURE128:-VERS-SSL3.0"
#endif #endif
#ifdef SSL_SUPPORT #ifdef SSL_SUPPORT