[EGIT] [core/efl] efl-1.18 01/01: Emile: use stronger ssl cipher

[Simon Lees]

simotek pushed a commit to branch efl-1.18.

http://git.enlightenment.org/core/efl.git/commit/?id=48d567d87c2a7530a9399192547bb22974cf949f

commit 48d567d87c2a7530a9399192547bb22974cf949f
Author: Simon Lees <sfl...@suse.de>
Date:   Mon Oct 17 20:58:04 2016 +1030

    Emile: use stronger ssl cipher
    
    Follows on from 356a1aa87a04a8d1c43e01fa861270d0947069c0 emile
    didn't exist when this work was done originally
---
 src/lib/emile/emile_cipher_openssl.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/lib/emile/emile_cipher_openssl.c 
b/src/lib/emile/emile_cipher_openssl.c
index 2bbe83f..301f3ba 100644
--- a/src/lib/emile/emile_cipher_openssl.c
+++ b/src/lib/emile/emile_cipher_openssl.c
@@ -321,7 +321,7 @@ emile_cipher_server_listen(Emile_Cipher_Type t)
    INF("DH params successfully generated and applied!");
 
    if (!SSL_CTX_set_cipher_list(r->ssl_ctx,
-                                "aNULL:!eNULL:!LOW:!EXPORT:@STRENGTH"))
+                                
"aRSA+HIGH:+kEDH:+kRSA:!kSRP:!kPSK:+3DES:!MD5"))
      goto on_error;
 
    return r;
@@ -748,7 +748,7 @@ emile_cipher_server_connect(Emile_Cipher_Type t)
      }
 
    if (!SSL_CTX_set_cipher_list(r->ssl_ctx,
-                                
"aNULL:!eNULL:!LOW:!EXPORT:!ECDH:RSA:AES:!PSK:@STRENGTH"))
+                                
"aRSA+HIGH:+kEDH:+kRSA:!kSRP:!kPSK:+3DES:!MD5"))
      goto on_error;
 
    return r;

--