mirrors/ngircd
1
0
Fork 0
mirror of https://github.com/osmarks/ngircd.git synced 2025-09-08 21:45:58 +00:00
Code Issues Releases Wiki Activity

Cipher list selection for GnuTLS

Browse Source 
This patch implements the missing functionality for cipher list selection
using GnuTLS (our OpenSSL code has this already).
This commit is contained in:
Alexander Barton
2013-09-15 17:57:41 +02:00
parent 51231ac8d4
commit b9006acee3
3 changed files with 48 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
man/ngircd.conf.5.tmpl
View File

@@ -367,11 +367,13 @@ when it is compiled with support for SSL using OpenSSL or GnuTLS!
SSL Certificate file of the private server key.
.TP
\fBCipherList\fR (string)
OpenSSL only: Select cipher suites allowed for SSL/TLS connections. This
defaults to the empty string, so all supported ciphers are allowed. Please see
'man 1ssl ciphers' for details. This setting allows only "high strength" cipher
suites, disables the ones without authentication, and sorts by strength, for
example: "HIGH:!aNULL:@STRENGTH".
Select cipher suites allowed for SSL/TLS connections. This defaults to the
empty string, so all supported ciphers are allowed.
Please see 'man 1ssl ciphers' (OpenSSL) and 'man 3 gnutls_priority_init'
(GnuTLS) for details.
For example, this setting allows only "high strength" cipher suites, disables
the ones without authentication, and sorts by strength:
"HIGH:!aNULL:@STRENGTH" (OpenSSL), "SECURE128" (GnuTLS).
.TP
\fBDHFile\fR (string)
Name of the Diffie-Hellman Parameter file. Can be created with GnuTLS