]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Disable unsupported TLS cipher modes by default, cleans --show-tls output.
authorSteffan Karger <steffan@karger.me>
Sat, 1 Mar 2014 14:36:15 +0000 (15:36 +0100)
committerGert Doering <gert@greenie.muc.de>
Sun, 23 Mar 2014 21:10:06 +0000 (22:10 +0100)
commitf8c4e88280b060ee8aa77ac5d00133848689694b
tree06a8be7c56acb194d848fc1784ec065429fd36b5
parent0146fd00c3bd70a470290be7be27ee75db2db63b
Disable unsupported TLS cipher modes by default, cleans --show-tls output.

This explicitly disables a number of tls ciphers that OpenVPN has currently
no support for. OpenSSL will automatically detect this during negotiation,
but --show-tls would erroneously show a number of unsupported ciphers.

Signed-off-by: Steffan Karger <steffan@karger.me>
Acked-by: Arne Schwabe <arne@rfc2549.org>
Message-Id: <1393684575-28112-3-git-send-email-steffan@karger.me>
URL: http://article.gmane.org/gmane.network.openvpn.devel/8318
Signed-off-by: Gert Doering <gert@greenie.muc.de>
src/openvpn/ssl_openssl.c