simotek pushed a commit to branch efl-1.18. http://git.enlightenment.org/core/efl.git/commit/?id=48d567d87c2a7530a9399192547bb22974cf949f
commit 48d567d87c2a7530a9399192547bb22974cf949f Author: Simon Lees <sfl...@suse.de> Date: Mon Oct 17 20:58:04 2016 +1030 Emile: use stronger ssl cipher Follows on from 356a1aa87a04a8d1c43e01fa861270d0947069c0 emile didn't exist when this work was done originally --- src/lib/emile/emile_cipher_openssl.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/lib/emile/emile_cipher_openssl.c b/src/lib/emile/emile_cipher_openssl.c index 2bbe83f..301f3ba 100644 --- a/src/lib/emile/emile_cipher_openssl.c +++ b/src/lib/emile/emile_cipher_openssl.c @@ -321,7 +321,7 @@ emile_cipher_server_listen(Emile_Cipher_Type t) INF("DH params successfully generated and applied!"); if (!SSL_CTX_set_cipher_list(r->ssl_ctx, - "aNULL:!eNULL:!LOW:!EXPORT:@STRENGTH")) + "aRSA+HIGH:+kEDH:+kRSA:!kSRP:!kPSK:+3DES:!MD5")) goto on_error; return r; @@ -748,7 +748,7 @@ emile_cipher_server_connect(Emile_Cipher_Type t) } if (!SSL_CTX_set_cipher_list(r->ssl_ctx, - "aNULL:!eNULL:!LOW:!EXPORT:!ECDH:RSA:AES:!PSK:@STRENGTH")) + "aRSA+HIGH:+kEDH:+kRSA:!kSRP:!kPSK:+3DES:!MD5")) goto on_error; return r; --