[EGIT] [core/efl] master 01/01: Emile: use stronger ssl cipher

[Simon Lees]

simotek pushed a commit to branch master.

http://git.enlightenment.org/core/efl.git/commit/?id=d7a2e8608b50f7c7791eb82e4d66652aa06371c4

commit d7a2e8608b50f7c7791eb82e4d66652aa06371c4
Author: Simon Lees <sfl...@suse.de>
Date:   Mon Oct 17 20:58:04 2016 +1030

    Emile: use stronger ssl cipher
    
    Follows on from 356a1aa87a04a8d1c43e01fa861270d0947069c0 emile
    didn't exist when this work was done originally
---
 src/lib/emile/emile_cipher_openssl.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/lib/emile/emile_cipher_openssl.c 
b/src/lib/emile/emile_cipher_openssl.c
index 84048ce..9963c22 100644
--- a/src/lib/emile/emile_cipher_openssl.c
+++ b/src/lib/emile/emile_cipher_openssl.c
@@ -338,7 +338,7 @@ emile_cipher_server_listen(Emile_Cipher_Type t)
    INF("DH params successfully generated and applied!");
 
    if (!SSL_CTX_set_cipher_list(r->ssl_ctx,
-                                "aNULL:!eNULL:!LOW:!EXPORT:@STRENGTH"))
+                                
"aRSA+HIGH:+kEDH:+kRSA:!kSRP:!kPSK:+3DES:!MD5"))
      goto on_error;
 
    return r;
@@ -765,7 +765,7 @@ emile_cipher_server_connect(Emile_Cipher_Type t)
      }
 
    if (!SSL_CTX_set_cipher_list(r->ssl_ctx,
-                                
"aNULL:!eNULL:!LOW:!EXPORT:!ECDH:RSA:AES:!PSK:@STRENGTH"))
+                                
"aRSA+HIGH:+kEDH:+kRSA:!kSRP:!kPSK:+3DES:!MD5"))
      goto on_error;
 
    return r;

--