]>
Commit | Line | Data |
---|---|---|
e153efaf | 1 | --- openssl-1.1.1d.orig/include/openssl/ssl.h 2019-11-04 19:13:08.801905796 +0100 |
2 | +++ openssl-1.1.1d/include/openssl/ssl.h 2019-11-04 19:14:05.229896747 +0100 | |
3 | @@ -170,7 +170,7 @@ | |
4 | * an application-defined cipher list string starts with 'DEFAULT'. | |
5 | * This applies to ciphersuites for TLSv1.2 and below. | |
6 | */ | |
7 | -# define SSL_DEFAULT_CIPHER_LIST "ALL:!COMPLEMENTOFDEFAULT:!eNULL" | |
159cab27 | 8 | +# define SSL_DEFAULT_CIPHER_LIST "HIGH:+aRSA:+SHA384:+SHA256:+DH:+SHA:!kRSA:!eNULL:!aNULL:!PSK:!SRP:!AESCCM:!DSS" |
e153efaf | 9 | /* This is the default set of TLSv1.3 ciphersuites */ |
10 | # if !defined(OPENSSL_NO_CHACHA) && !defined(OPENSSL_NO_POLY1305) | |
11 | # define TLS_DEFAULT_CIPHERSUITES "TLS_AES_256_GCM_SHA384:" \ |